General
-
Target
756ba5dbbdeb25bbd2fbab5f1fb58d9928f25e1be1ce3c608d8433eb69df298d
-
Size
771KB
-
Sample
220414-pw7j8scba5
-
MD5
8952e566dc30b2b0928253d3d066463d
-
SHA1
41c507fa1dba4e479f7db844b661ac130b8e907d
-
SHA256
756ba5dbbdeb25bbd2fbab5f1fb58d9928f25e1be1ce3c608d8433eb69df298d
-
SHA512
03dd400dc5217ce847934eaa6095204487fba4dddfc4c86bc4f7222d493702a798e9238c092fc4325dde1c46131e74ee65415d9c5ef24bc17407becca5004335
Static task
static1
Behavioral task
behavioral1
Sample
756ba5dbbdeb25bbd2fbab5f1fb58d9928f25e1be1ce3c608d8433eb69df298d.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
756ba5dbbdeb25bbd2fbab5f1fb58d9928f25e1be1ce3c608d8433eb69df298d.exe
Resource
win10v2004-20220310-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.finalegitim.com.tr - Port:
587 - Username:
[email protected] - Password:
ek1234final
Targets
-
-
Target
756ba5dbbdeb25bbd2fbab5f1fb58d9928f25e1be1ce3c608d8433eb69df298d
-
Size
771KB
-
MD5
8952e566dc30b2b0928253d3d066463d
-
SHA1
41c507fa1dba4e479f7db844b661ac130b8e907d
-
SHA256
756ba5dbbdeb25bbd2fbab5f1fb58d9928f25e1be1ce3c608d8433eb69df298d
-
SHA512
03dd400dc5217ce847934eaa6095204487fba4dddfc4c86bc4f7222d493702a798e9238c092fc4325dde1c46131e74ee65415d9c5ef24bc17407becca5004335
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Meta Stealer Stealer
Meta Stealer steals passwords stored in browsers, written in C++.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext
-