General
- Target 27de1b93d393256db83dc9c4c0cb85f821edee6b11fc68c19634916c62c51197.exe
- Size 1.1MB
- Sample240318-nc5e4afd65
- SHA256 27de1b93d393256db83dc9c4c0cb85f821edee6b11fc68c19634916c62c51197
- MD5 5f460f10630cbaaa64354b7122aecbf4
- SHA1 ae5c5bb7f34705200d77861771c4f0443b3808a3
- SHA512 ad4c426be49c37986eccf88d214b76602d1f90d91fe4ed9362118d67efe0e9b6e5b09dcb1362844e9fe59ffecff5c6c834aa8774181897991ce413a3a7d664d8
- SSDEEP 24576:+qDEvCTbMWu7rQYlBQcBiT6rprG8aOOSIicQ+tZOhFp40UTtJbnJ:+TvC/MTQYxsWR7aOOSIbt4h740U
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
27de1b93d393256db83dc9c4c0cb85f821edee6b11fc68c19634916c62c51197.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
27de1b93d393256db83dc9c4c0cb85f821edee6b11fc68c19634916c62c51197.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
bezelety.top
-
Port
587
-
Username
-
Password
IxF(..bSed6k
-
Email to
Targets
-
- Target 27de1b93d393256db83dc9c4c0cb85f821edee6b11fc68c19634916c62c51197.exe
- Size 1.1MB
- SHA256 27de1b93d393256db83dc9c4c0cb85f821edee6b11fc68c19634916c62c51197
- MD5 5f460f10630cbaaa64354b7122aecbf4
- SHA1 ae5c5bb7f34705200d77861771c4f0443b3808a3
- SHA512 ad4c426be49c37986eccf88d214b76602d1f90d91fe4ed9362118d67efe0e9b6e5b09dcb1362844e9fe59ffecff5c6c834aa8774181897991ce413a3a7d664d8
- SSDEEP 24576:+qDEvCTbMWu7rQYlBQcBiT6rprG8aOOSIicQ+tZOhFp40UTtJbnJ:+TvC/MTQYxsWR7aOOSIbt4h740U
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext