General
-
Target
9fed3dbdc1a91207ad54b87566da1785fd4c9d53b8d30e497a6f7407170a8ca5
-
Size
414KB
-
Sample
220521-ndal4sdeb8
-
MD5
82cbe11e2562a48aee640b4f96193073
-
SHA1
b44b98eb65c2083aff156f1647417b07675f6a9a
-
SHA256
9fed3dbdc1a91207ad54b87566da1785fd4c9d53b8d30e497a6f7407170a8ca5
-
SHA512
77eb89f64627bcec30cfe2a7345ef0f742c1dd01e18fd0ecad68542480a67d0c9633f07cb6fa203ca7de26a6615033bfedfa4e4562ad8ee94cd4a130120c9713
Static task
static1
Behavioral task
behavioral1
Sample
V7C7C9DYvHk6oyc.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
V7C7C9DYvHk6oyc.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
V7C7C9DYvHk6oyc.exe
-
Size
479KB
-
MD5
7b237a903be41c01ebcbdacdb7c2b01b
-
SHA1
4bad56539255f86436189399d7a2dd122da48f14
-
SHA256
693ae48fccd2fcb49e9358d508f2d4fc8695a4e100f7ba75e4b35dd1973f28ae
-
SHA512
8dea31bd15b8f4d0d5bd93c3c91dda212a82a5f5e454b6a560857324036b851e1d0fa734e01b0ca33ed7e855f757fdb77765da383a1aa84960dcbbca157281ea
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-