General
-
Target
https://www.mediafire.com/file/7iv0nvs45yws1w6/Request+for+Quote.tgz/file
-
Sample
240326-lc5praaa3s
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.mediafire.com/file/7iv0nvs45yws1w6/Request+for+Quote.tgz/file
Resource
win10-20240221-en
windows10-1703-x64
13 signatures
300 seconds
Malware Config
Extracted
Family
agenttesla
C2
https://api.telegram.org/bot7039723551:AAFxH1K4wDT1e_hnNFQy8ZWZ18ejwddYex8/
Targets
-
-
Target
https://www.mediafire.com/file/7iv0nvs45yws1w6/Request+for+Quote.tgz/file
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-