General
-
Target
0f6c3316d8e397865d279f0d056f7400
-
Size
1.2MB
-
Sample
231230-fn643aaebm
-
MD5
0f6c3316d8e397865d279f0d056f7400
-
SHA1
f40fd41def34eb72e0b8d2eb791bd262bee63e8e
-
SHA256
de29548b44b77a507f9bd623c692f3a3a7322558aca93e0cef849b1b1d5e42e3
-
SHA512
f75a9fc28e4311e2255ae683906e5c632b72d30631700be8617cc103f06b2c20dcdce4750b60704c29cc5acb62884a7518895882e5ed96b0d3c854ef3a47cb1a
-
SSDEEP
24576:OgNWI9rafhKSxWQ6QAhCN5n19MQobQWV/Nm/y12Nhm3:ODIFafqQ6QuuI2yYI
Static task
static1
Behavioral task
behavioral1
Sample
0f6c3316d8e397865d279f0d056f7400.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f6c3316d8e397865d279f0d056f7400.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.jk-peru.com - Port:
587 - Username:
[email protected] - Password:
jkperu2014 - Email To:
[email protected]
Targets
-
-
Target
0f6c3316d8e397865d279f0d056f7400
-
Size
1.2MB
-
MD5
0f6c3316d8e397865d279f0d056f7400
-
SHA1
f40fd41def34eb72e0b8d2eb791bd262bee63e8e
-
SHA256
de29548b44b77a507f9bd623c692f3a3a7322558aca93e0cef849b1b1d5e42e3
-
SHA512
f75a9fc28e4311e2255ae683906e5c632b72d30631700be8617cc103f06b2c20dcdce4750b60704c29cc5acb62884a7518895882e5ed96b0d3c854ef3a47cb1a
-
SSDEEP
24576:OgNWI9rafhKSxWQ6QAhCN5n19MQobQWV/Nm/y12Nhm3:ODIFafqQ6QuuI2yYI
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-