General
- Target invoice-57688-2021.exe
- Size 15KB
- Sample220221-q2153sbdhj
- SHA256 edbf7a0554612e36d0928328f5f12ebe5676a4e848c2ff12a67bb076a3ddd499
- MD5 875fec9f027ac805144d056cfec49861
- SHA1 a2cefcf41561d6a399515a88fd61a5930c21d581
- SHA512 26b736f688ee23e7294ce69680eb9ae52ac89aea0b9be7b06114fe2d302a9ac5d9e5ed2436eed3d001120dc9af8a5bfcd48ef717ea4a217d2a2138fc68bf589d
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
invoice-57688-2021.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
invoice-57688-2021.exe
Resource
win10v2004-en-20220112
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://ftp.mgcpakistan.com/
-
Port
21
-
Username
-
Password
boygirl123456
Targets
-
- Target invoice-57688-2021.exe
- Size 15KB
- SHA256 edbf7a0554612e36d0928328f5f12ebe5676a4e848c2ff12a67bb076a3ddd499
- MD5 875fec9f027ac805144d056cfec49861
- SHA1 a2cefcf41561d6a399515a88fd61a5930c21d581
- SHA512 26b736f688ee23e7294ce69680eb9ae52ac89aea0b9be7b06114fe2d302a9ac5d9e5ed2436eed3d001120dc9af8a5bfcd48ef717ea4a217d2a2138fc68bf589d
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext