General
- Target pago perdido correspondiente.exe
- Size 209KB
- Sample220419-hwg61sdff3
- SHA256 453fa70b33e7ae4dee6a39f4cf2f1a347aab979e4c172a684be0de3fb57bb0a0
- MD5 d052c2671a61474201a3b311971876dd
- SHA1 2f9375c85615aae2c31872f92ba19291be801264
- SHA512 53331dae40f04a93b265626bee4c999cce030685d36e4c9e617b0fe3dbf11a08858fb506c645b3de00bbe7ba4eb2cd1d7b5111f8bc8871a324e83d4a10b54f98
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
pago perdido correspondiente.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
pago perdido correspondiente.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.ferdi.hu
-
Port
587
-
Username
-
Password
Q1w2e3r4t5!
-
Email to
Targets
-
- Target pago perdido correspondiente.exe
- Size 209KB
- SHA256 453fa70b33e7ae4dee6a39f4cf2f1a347aab979e4c172a684be0de3fb57bb0a0
- MD5 d052c2671a61474201a3b311971876dd
- SHA1 2f9375c85615aae2c31872f92ba19291be801264
- SHA512 53331dae40f04a93b265626bee4c999cce030685d36e4c9e617b0fe3dbf11a08858fb506c645b3de00bbe7ba4eb2cd1d7b5111f8bc8871a324e83d4a10b54f98
- MD5 SHA1 SHA512
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles