General
-
Target
f49b665e011ce87a1e9bd296cc8010c4976d1592e76b4daeaec91a1b6437ea8fexe.exe
-
Size
721KB
-
Sample
231207-x8jmyaeg95
-
MD5
9693b790d2e6a6a57a00d77d1d118073
-
SHA1
1aafdddba11f2747b013de3ac8ff581470318b52
-
SHA256
f49b665e011ce87a1e9bd296cc8010c4976d1592e76b4daeaec91a1b6437ea8f
-
SHA512
d609f2d4f8971616546360c6066a1714d7fc73db2b58ef98b864721d6cdf1483b1a8b881794f620079ff485575aa668f1adc6ad3d5fcccf4360784f60ea05d31
-
SSDEEP
12288:DI5nF8ME6jD/JZQTj7oc5qn8IQFcKaAjIktXMr7gnmryyJt7ErI+1BRUyva:DIPtD/J0j74n8ItnAjIkHyvErxUyi
Static task
static1
Behavioral task
behavioral1
Sample
f49b665e011ce87a1e9bd296cc8010c4976d1592e76b4daeaec91a1b6437ea8fexe.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
f49b665e011ce87a1e9bd296cc8010c4976d1592e76b4daeaec91a1b6437ea8fexe.exe
Resource
win10v2004-20231127-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.abi0expertise.com - Port:
587 - Username:
[email protected] - Password:
Najwa1949! - Email To:
[email protected]
Targets
-
-
Target
f49b665e011ce87a1e9bd296cc8010c4976d1592e76b4daeaec91a1b6437ea8fexe.exe
-
Size
721KB
-
MD5
9693b790d2e6a6a57a00d77d1d118073
-
SHA1
1aafdddba11f2747b013de3ac8ff581470318b52
-
SHA256
f49b665e011ce87a1e9bd296cc8010c4976d1592e76b4daeaec91a1b6437ea8f
-
SHA512
d609f2d4f8971616546360c6066a1714d7fc73db2b58ef98b864721d6cdf1483b1a8b881794f620079ff485575aa668f1adc6ad3d5fcccf4360784f60ea05d31
-
SSDEEP
12288:DI5nF8ME6jD/JZQTj7oc5qn8IQFcKaAjIktXMr7gnmryyJt7ErI+1BRUyva:DIPtD/J0j74n8ItnAjIkHyvErxUyi
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-