General
-
Target
46faf109d6d4c541d9ab22e92753f1f88249aea47d037c2055b11c09a0e06bd4
-
Size
382KB
-
Sample
220521-d6e27aghe6
-
MD5
1e975f59451c5d1547b2e453c3a3f9b0
-
SHA1
ab1fca71915ef19441fb60da1a13b24a40dfffd2
-
SHA256
46faf109d6d4c541d9ab22e92753f1f88249aea47d037c2055b11c09a0e06bd4
-
SHA512
410da44b96a13bee79161f372c777fd826a47f628934fefa64ecec36e0c5600633c3984eabb338f0766541bbf7115f1ff3ffb320cf0f1a4499f5fd4bd1b0d060
Static task
static1
Behavioral task
behavioral1
Sample
46faf109d6d4c541d9ab22e92753f1f88249aea47d037c2055b11c09a0e06bd4.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
46faf109d6d4c541d9ab22e92753f1f88249aea47d037c2055b11c09a0e06bd4.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
terminal6.veeblehosting.com - Port:
587 - Username:
[email protected] - Password:
D5%&cLkPJ{rW
Targets
-
-
Target
46faf109d6d4c541d9ab22e92753f1f88249aea47d037c2055b11c09a0e06bd4
-
Size
382KB
-
MD5
1e975f59451c5d1547b2e453c3a3f9b0
-
SHA1
ab1fca71915ef19441fb60da1a13b24a40dfffd2
-
SHA256
46faf109d6d4c541d9ab22e92753f1f88249aea47d037c2055b11c09a0e06bd4
-
SHA512
410da44b96a13bee79161f372c777fd826a47f628934fefa64ecec36e0c5600633c3984eabb338f0766541bbf7115f1ff3ffb320cf0f1a4499f5fd4bd1b0d060
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Accesses Microsoft Outlook profiles
-