General
- Target New Order.exe
- Size 13KB
- Sample230209-k9mprsdf91
- SHA256 6bf19b47e17a3856e31e384b6aa304346e151f2c41385d01da5834a751fae776
- MD5 7d75fc0dec90f41e388c904d92750905
- SHA1 ca4e7bb6af3d9328dfb66d9f4fcd6c46ef4e2677
- SHA512 70df11fafdf6261729c3f8c40d9e3ae6e2e7b5b8b3da608973e4e025436d8e042d47d82bbb6f5c896eefde99b732f8cc4787ec32f67d243d21319e6f744aab46
- SSDEEP 384:kYVYVMIM/F1tIbE31qCTzZK4v6wzbaZv:rYVtM/NIQqCTzB6SbSv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
New Order.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
New Order.exe
Resource
win10v2004-20221111-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.veectero.com
-
Port
587
-
Username
-
Password
TevR]J,YJ6Oj
-
Email to
Targets
-
- Target New Order.exe
- Size 13KB
- SHA256 6bf19b47e17a3856e31e384b6aa304346e151f2c41385d01da5834a751fae776
- MD5 7d75fc0dec90f41e388c904d92750905
- SHA1 ca4e7bb6af3d9328dfb66d9f4fcd6c46ef4e2677
- SHA512 70df11fafdf6261729c3f8c40d9e3ae6e2e7b5b8b3da608973e4e025436d8e042d47d82bbb6f5c896eefde99b732f8cc4787ec32f67d243d21319e6f744aab46
- SSDEEP 384:kYVYVMIM/F1tIbE31qCTzZK4v6wzbaZv:rYVtM/NIQqCTzB6SbSv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext