General
-
Target
357d3065cb574914e898ff1871a430f39de44d5dd73e47a986bbda5930ccbb67
-
Size
898KB
-
Sample
220414-ps8ccsggck
-
MD5
6fa623fed0d9696248aa78dca2f94352
-
SHA1
1e8fa22b557f36b671eac10573f631011e99ed83
-
SHA256
357d3065cb574914e898ff1871a430f39de44d5dd73e47a986bbda5930ccbb67
-
SHA512
ac2f72dd2793c5e79880e5f6c73aee9e2b0460d493a25a33664858aa4c62f01cf6ac006a0d8fc6534225900875fc2b377964533652dc18a26b4c2020cf0457d5
Static task
static1
Behavioral task
behavioral1
Sample
357d3065cb574914e898ff1871a430f39de44d5dd73e47a986bbda5930ccbb67.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
357d3065cb574914e898ff1871a430f39de44d5dd73e47a986bbda5930ccbb67.exe
Resource
win10v2004-20220310-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.liderpano.com - Port:
587 - Username:
[email protected] - Password:
LDR8521ldr - Email To:
[email protected]
Targets
-
-
Target
357d3065cb574914e898ff1871a430f39de44d5dd73e47a986bbda5930ccbb67
-
Size
898KB
-
MD5
6fa623fed0d9696248aa78dca2f94352
-
SHA1
1e8fa22b557f36b671eac10573f631011e99ed83
-
SHA256
357d3065cb574914e898ff1871a430f39de44d5dd73e47a986bbda5930ccbb67
-
SHA512
ac2f72dd2793c5e79880e5f6c73aee9e2b0460d493a25a33664858aa4c62f01cf6ac006a0d8fc6534225900875fc2b377964533652dc18a26b4c2020cf0457d5
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Meta Stealer Stealer
Meta Stealer steals passwords stored in browsers, written in C++.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext
-