General
-
Target
bb8c5d01927965b23f73675067caacda1a5289bcf26646d41353436c4e28d6bd
-
Size
757KB
-
Sample
220414-pwl9ascag5
-
MD5
6f9419d0156908698670142676d3606d
-
SHA1
d529a9f62f07656c4cd7b3049f12bfe27bebf66e
-
SHA256
bb8c5d01927965b23f73675067caacda1a5289bcf26646d41353436c4e28d6bd
-
SHA512
55cabbb1e9257356ba5be9ce653206f2bfa009c3f13e082455be91cbf9f30640d49163f5924e9a1efa530ab335188c98f7bb89b4b44349292ffeae19c1bfbb78
Static task
static1
Behavioral task
behavioral1
Sample
bb8c5d01927965b23f73675067caacda1a5289bcf26646d41353436c4e28d6bd.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
bb8c5d01927965b23f73675067caacda1a5289bcf26646d41353436c4e28d6bd.exe
Resource
win10v2004-20220310-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.polimeter.com - Port:
587 - Username:
[email protected] - Password:
5337776740
Targets
-
-
Target
bb8c5d01927965b23f73675067caacda1a5289bcf26646d41353436c4e28d6bd
-
Size
757KB
-
MD5
6f9419d0156908698670142676d3606d
-
SHA1
d529a9f62f07656c4cd7b3049f12bfe27bebf66e
-
SHA256
bb8c5d01927965b23f73675067caacda1a5289bcf26646d41353436c4e28d6bd
-
SHA512
55cabbb1e9257356ba5be9ce653206f2bfa009c3f13e082455be91cbf9f30640d49163f5924e9a1efa530ab335188c98f7bb89b4b44349292ffeae19c1bfbb78
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Meta Stealer Stealer
Meta Stealer steals passwords stored in browsers, written in C++.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext
-