General
-
Target
d8385c84de51c76e43b03a7dd97d50f8c8909deb823bde0b33c3e8db337718d7
-
Size
1.2MB
-
Sample
220520-3qcpkahcg2
-
MD5
0546ff91b2f19b699a39f36e6b6255aa
-
SHA1
1220d59ca5a90d206ec414e4d0332b96e997b37f
-
SHA256
d8385c84de51c76e43b03a7dd97d50f8c8909deb823bde0b33c3e8db337718d7
-
SHA512
76b9cca4a9de7a3bb11b9f2e505c24d9561c55810c18b6416d156f9f7eaa01b5e6330b1b360ec9a2cd160379f764b2cddecdd8fb4cb879eceecc2fd79310f618
Static task
static1
Behavioral task
behavioral1
Sample
QUOTE_RE.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
QUOTE_RE.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
QUOTE_RE.EXE
-
Size
537KB
-
MD5
49bb7f296f0a614f5dfce69519568a0c
-
SHA1
9aaa30e5a43187c74906c9b19bb02447f894e366
-
SHA256
b35ad0fe6a5d3df3158c26cda0089cded4b956857ea965877fe553bf7e2ac3b8
-
SHA512
a95dbeca11673ce19327bbce054c2957a9663c9b59010e2f70342db9770644b679c3c3d37b058d261c29491a3300d5dc26634196e104a766e5c5a99c286db9ac
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Accesses Microsoft Outlook profiles
-