Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
OC 1609 SOBEK Ingenieros Chile 20230829_PDF .exe
-
Size
916KB
-
Sample
230904-kjhywsfc66
-
MD5
5a0d66185fc03a6d8e34a35b8fa0f9c1
-
SHA1
38fa755943aefe22a9115491771921b6b92e4cc2
-
SHA256
3d935f0a6fe7d1aab765773855319fccf188e0b5704626d94574bd1b88a16b16
-
SHA512
f59d7db127756b5de10ab282c67c0fc2d62b557395516ea88da470256f39913773315a7795ee9d13c76c17b3202c234f5e18fd2026c5d29236fbb985b06cc8c0
-
SSDEEP
12288:oklBLFweUzGsa/XkIlidgSOS5h6ek4GFOZCjEcvdZ9AvwEbjDR9eWU:dB5Uq/0IgdNOI6f4GFOZCjLVPAva
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
smtp.rapltorsupplies.com - Port:
587 - Username:
[email protected] - Password:
JG%xlMm6 - Email To:
[email protected]
Targets
-
-
Target
OC 1609 SOBEK Ingenieros Chile 20230829_PDF .exe
-
Size
916KB
-
MD5
5a0d66185fc03a6d8e34a35b8fa0f9c1
-
SHA1
38fa755943aefe22a9115491771921b6b92e4cc2
-
SHA256
3d935f0a6fe7d1aab765773855319fccf188e0b5704626d94574bd1b88a16b16
-
SHA512
f59d7db127756b5de10ab282c67c0fc2d62b557395516ea88da470256f39913773315a7795ee9d13c76c17b3202c234f5e18fd2026c5d29236fbb985b06cc8c0
-
SSDEEP
12288:oklBLFweUzGsa/XkIlidgSOS5h6ek4GFOZCjEcvdZ9AvwEbjDR9eWU:dB5Uq/0IgdNOI6f4GFOZCjLVPAva
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-