General
-
Target
bb4d493b59bbb2d69843af401dcd468ed0a8ed7c97932d99497a299d42ccaf3c
-
Size
531KB
-
Sample
220625-lttc2sfddr
-
MD5
2095dfc217f35f5ca91e12f05986744e
-
SHA1
cb910d82a50b3b6a35cf29f114d095375d41f608
-
SHA256
bb4d493b59bbb2d69843af401dcd468ed0a8ed7c97932d99497a299d42ccaf3c
-
SHA512
db03d898dbb7797b494b014cc76bee9c5083d214d84ad31b5fd23dbd2d08c4ffe3d387acfb4a9e4f75de08a53ca9fc152c331e8879213ee2bf0040105759dfd1
Static task
static1
Behavioral task
behavioral1
Sample
bb4d493b59bbb2d69843af401dcd468ed0a8ed7c97932d99497a299d42ccaf3c.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
bb4d493b59bbb2d69843af401dcd468ed0a8ed7c97932d99497a299d42ccaf3c.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
bb4d493b59bbb2d69843af401dcd468ed0a8ed7c97932d99497a299d42ccaf3c
-
Size
531KB
-
MD5
2095dfc217f35f5ca91e12f05986744e
-
SHA1
cb910d82a50b3b6a35cf29f114d095375d41f608
-
SHA256
bb4d493b59bbb2d69843af401dcd468ed0a8ed7c97932d99497a299d42ccaf3c
-
SHA512
db03d898dbb7797b494b014cc76bee9c5083d214d84ad31b5fd23dbd2d08c4ffe3d387acfb4a9e4f75de08a53ca9fc152c331e8879213ee2bf0040105759dfd1
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-