General
-
Target
8f081e86e16979af5f21b10046cf9ffac97c4ddfe4c4f192322e66950b8803fe
-
Size
903KB
-
Sample
220414-pwxd9sghek
-
MD5
36d61c953931c88be3e6dcdc1c31ccbd
-
SHA1
a10467d4baabe41bb977f7ae67789c415900f07e
-
SHA256
8f081e86e16979af5f21b10046cf9ffac97c4ddfe4c4f192322e66950b8803fe
-
SHA512
7d348e6f6e82d90a22747e05a9f01de7f25b93340b00d823058b3130ff34aada0a0c98890ee4be6d5ad7290c6636e84134f9b5037d245957fcd3558e61ea9650
Static task
static1
Behavioral task
behavioral1
Sample
8f081e86e16979af5f21b10046cf9ffac97c4ddfe4c4f192322e66950b8803fe.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
8f081e86e16979af5f21b10046cf9ffac97c4ddfe4c4f192322e66950b8803fe.exe
Resource
win10v2004-20220331-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.goksan.com.tr - Port:
587 - Username:
[email protected] - Password:
FL2x6572 - Email To:
[email protected]
Targets
-
-
Target
8f081e86e16979af5f21b10046cf9ffac97c4ddfe4c4f192322e66950b8803fe
-
Size
903KB
-
MD5
36d61c953931c88be3e6dcdc1c31ccbd
-
SHA1
a10467d4baabe41bb977f7ae67789c415900f07e
-
SHA256
8f081e86e16979af5f21b10046cf9ffac97c4ddfe4c4f192322e66950b8803fe
-
SHA512
7d348e6f6e82d90a22747e05a9f01de7f25b93340b00d823058b3130ff34aada0a0c98890ee4be6d5ad7290c6636e84134f9b5037d245957fcd3558e61ea9650
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Meta Stealer Stealer
Meta Stealer steals passwords stored in browsers, written in C++.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext
-