General
-
Target
2b2150b4b966d983f4757fa00856afd280becac91fdb6f385fff8a2f9471f816
-
Size
226KB
-
Sample
231204-b3dc3sgd9x
-
MD5
e4f6895c5f376c9c0564fe3603c65341
-
SHA1
86fbfbeeef55e549cd04bdfbb409ecc42d703b6a
-
SHA256
2b2150b4b966d983f4757fa00856afd280becac91fdb6f385fff8a2f9471f816
-
SHA512
bc5f364b302d1e477eed8c7939f48302a00f8369dcf648809b7c0fc7d9f4366858ffa21f210366d0f3277728a43d3dd7f30398717a3419a33b7d9914f16d19f1
-
SSDEEP
3072:2DKW1LgppLRHMY0TBfJvjcTp5XkCyd12GTgs8kXUrKBBFnDhSRlXsog:2DKW1Lgbdl0TBBvjc/kCK2GTgUXZBVgG
Static task
static1
Behavioral task
behavioral1
Sample
2b2150b4b966d983f4757fa00856afd280becac91fdb6f385fff8a2f9471f816.exe
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
2b2150b4b966d983f4757fa00856afd280becac91fdb6f385fff8a2f9471f816.exe
Resource
win10v2004-20231201-en
Malware Config
Targets
-
-
Target
2b2150b4b966d983f4757fa00856afd280becac91fdb6f385fff8a2f9471f816
-
Size
226KB
-
MD5
e4f6895c5f376c9c0564fe3603c65341
-
SHA1
86fbfbeeef55e549cd04bdfbb409ecc42d703b6a
-
SHA256
2b2150b4b966d983f4757fa00856afd280becac91fdb6f385fff8a2f9471f816
-
SHA512
bc5f364b302d1e477eed8c7939f48302a00f8369dcf648809b7c0fc7d9f4366858ffa21f210366d0f3277728a43d3dd7f30398717a3419a33b7d9914f16d19f1
-
SSDEEP
3072:2DKW1LgppLRHMY0TBfJvjcTp5XkCyd12GTgs8kXUrKBBFnDhSRlXsog:2DKW1Lgbdl0TBBvjc/kCK2GTgUXZBVgG
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-