General
-
Target
e57c13594572d16d7b8adc84628959c8f595d801a5360df81623f45d53d7bcb7
-
Size
496KB
-
Sample
220520-169m5aegd3
-
MD5
38179c1682c58247499d3e3f422648dd
-
SHA1
e60e792a7b8deb3da6f3b38e773680b44ec10184
-
SHA256
e57c13594572d16d7b8adc84628959c8f595d801a5360df81623f45d53d7bcb7
-
SHA512
ef859a6288dabc34207c346886309b4cadfc7ae25471b95e8b792c4fb12012bc3b233b0e8dfb88912c247821674773adaa32e77f61a8bb407203895026a44ce3
Static task
static1
Behavioral task
behavioral1
Sample
PIMX19031201.ppt.csv.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
PIMX19031201.ppt.csv.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
PIMX19031201.ppt.csv.bat
-
Size
626KB
-
MD5
154b9a5a3f487ddffe4ab579b4556c1f
-
SHA1
34fa640eb96c22ce2feec3cd32d7d83b9c3cae81
-
SHA256
442e9a77e130db7f6d9802a6a87e942e71163e9030134ac8ab4d76af114aba60
-
SHA512
47f482eef3141edb0e7b865a40d5a9634598d84d52584a50c5887bb598199c4de8f244be131b482aa0ac49893627cdf0c757d682bde26246b157d91cc2fe0154
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Accesses Microsoft Outlook profiles
-