General
- Target COTIZACION.exe
- Size 930KB
- Sample221019-sdaz4adbgl
- SHA256 8a8e4af9303c7a1ed727e3dc8eac70802cfd184cccd4d678aa3d7a8473dff210
- MD5 e5a5e2d31820e33816b585a783bab428
- SHA1 6d7056bb419c8a2e4ed7c7ed7a0e7929e77128e5
- SHA512 0bf8b8a7eff617ea1453cb1feb2035a8e2ac9fb54972a9be48af803189f1c83fc7062da836558233cfb2a8c451eb1e1178981af33ada96c1b5c150cc7d958e46
- SSDEEP 12288:BZIMvqV3fEu7K7TYmQms1B7ZtA5IZNMxUP5WVApKtM/z8BiCSlaxF0KUU:BZIE32mT5IZNM4dI2M6cX0
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
COTIZACION.exe
Resource
win7-20220812-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
COTIZACION.exe
Resource
win10v2004-20220812-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target COTIZACION.exe
- Size 930KB
- SHA256 8a8e4af9303c7a1ed727e3dc8eac70802cfd184cccd4d678aa3d7a8473dff210
- MD5 e5a5e2d31820e33816b585a783bab428
- SHA1 6d7056bb419c8a2e4ed7c7ed7a0e7929e77128e5
- SHA512 0bf8b8a7eff617ea1453cb1feb2035a8e2ac9fb54972a9be48af803189f1c83fc7062da836558233cfb2a8c451eb1e1178981af33ada96c1b5c150cc7d958e46
- SSDEEP 12288:BZIMvqV3fEu7K7TYmQms1B7ZtA5IZNMxUP5WVApKtM/z8BiCSlaxF0KUU:BZIE32mT5IZNM4dI2M6cX0
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext