General
-
Target
5c00d919e3895f872959d16c8bf210da4f9e20c01791a88d7a0f60b13a22c968.zip
-
Size
652KB
-
Sample
240326-q8va4sef7t
-
MD5
d45eac415e0a58b350f8e07e28c84a8d
-
SHA1
7f8f87d348030a16bcc09ef4274236a20292aaa8
-
SHA256
13ce9cd71f5fab1289e80e0490050d29109c173c4be3abe6954780472a8609d8
-
SHA512
d50c9632ab590805aed398cc7ffd4dd691c64ea4264ab863d9089a9dad6933ae3c7a31986c410660c0c2601c4e22cf009209a019fa944b259426bf8fad23dad4
-
SSDEEP
12288:NWAQTIhqiZ18Nx5LcPtO8Omn1mxjSl+rZ7dy+CQgXc1nOBQPBM8R0Qaa:0AaIPSpctO8Oi1mLZ7RC/cxOB8M8R0Qb
Static task
static1
Behavioral task
behavioral1
Sample
5c00d919e3895f872959d16c8bf210da4f9e20c01791a88d7a0f60b13a22c968.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5c00d919e3895f872959d16c8bf210da4f9e20c01791a88d7a0f60b13a22c968.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.worlorderbillions.top - Port:
587 - Username:
[email protected] - Password:
rwe87$%21q - Email To:
[email protected]
Targets
-
-
Target
5c00d919e3895f872959d16c8bf210da4f9e20c01791a88d7a0f60b13a22c968.exe
-
Size
1.1MB
-
MD5
4f2752fcd683bfff201108b2091510ce
-
SHA1
f2e7b7d2d56ba2232892d75a8c4d0bca7ef604c8
-
SHA256
5c00d919e3895f872959d16c8bf210da4f9e20c01791a88d7a0f60b13a22c968
-
SHA512
ec4ce3988ff1a5ad484b5f21bd4672318ee002c20d3cda789ced3288508b9d80eae1b45aa5ca8c9e4b5048eced9de73684bc885f2f64563c565b811b7df30929
-
SSDEEP
24576:TqDEvCTbMWu7rQYlBQcBiT6rprG8aTGCSJa5:TTvC/MTQYxsWR7aTT0
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-