General
- Target z23PURCHASEORDER-420004824400242301.exe
- Size 1.1MB
- Sample240125-qaccmshadr
- SHA256 5f68784fc3a36c40667eaa983bcebb2b63833b705630f72a3bd7ce49a95796e7
- MD5 4ce28fbd7fa35035b22ff61a51fcf54a
- SHA1 07fb2c7cba90eab7d9ba4de4e68dcc800546c40c
- SHA512 30e79a83c6af5da7eb13b248227fb05d8379e77b4448eef960194e5d5d1d56ecd48805e47ee45c05aa6d341ade4f517b9ed7c526d65532849ef99da2a107b8ad
- SSDEEP 24576:7AHnh+eWsN3skA4RV1Hom2KXMmHaBxtFV2f1jrJn35:Wh+ZkldoPK8YaBfFVClrX
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
z23PURCHASEORDER-420004824400242301.exe
Resource
win7-20231215-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
z23PURCHASEORDER-420004824400242301.exe
Resource
win10v2004-20231215-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
bezelety.top
-
Port
587
-
Username
-
Password
IxF(..bSed6k
-
Email to
Targets
-
- Target z23PURCHASEORDER-420004824400242301.exe
- Size 1.1MB
- SHA256 5f68784fc3a36c40667eaa983bcebb2b63833b705630f72a3bd7ce49a95796e7
- MD5 4ce28fbd7fa35035b22ff61a51fcf54a
- SHA1 07fb2c7cba90eab7d9ba4de4e68dcc800546c40c
- SHA512 30e79a83c6af5da7eb13b248227fb05d8379e77b4448eef960194e5d5d1d56ecd48805e47ee45c05aa6d341ade4f517b9ed7c526d65532849ef99da2a107b8ad
- SSDEEP 24576:7AHnh+eWsN3skA4RV1Hom2KXMmHaBxtFV2f1jrJn35:Wh+ZkldoPK8YaBfFVClrX
- MD5 SHA1 SHA512 SSDEEP
Score10/10AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
Suspicious use of SetThreadContext