General
-
Target
efce051b1d799bd344d7b354e5898cccd79a0014593d2034cd6b00d01b4536f8.exe
-
Size
590KB
-
Sample
240326-sdjbgacg29
-
MD5
3a783f218b4e0020b0443a8102b76769
-
SHA1
7f326e341fffd97a9b3f4f19aa65f796b38c9312
-
SHA256
efce051b1d799bd344d7b354e5898cccd79a0014593d2034cd6b00d01b4536f8
-
SHA512
599efed9ff6b0ed1ace19ecedbbb6eb607f32709d702354290836ff6e922b5f3029af7890e4f71b60b6b795b7c3215d7722f694bd3bea764f42976537f66b989
-
SSDEEP
12288:tKn7CFjjRsmxegtdYWZlgeodODaZg7sGojMWZBH:o4smN3odODB7CAW/
Static task
static1
Behavioral task
behavioral1
Sample
efce051b1d799bd344d7b354e5898cccd79a0014593d2034cd6b00d01b4536f8.exe
Resource
win11-20240221-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
cp8nl.hyperhost.ua - Port:
587 - Username:
[email protected] - Password:
7213575aceACE@#$ - Email To:
[email protected]
Targets
-
-
Target
efce051b1d799bd344d7b354e5898cccd79a0014593d2034cd6b00d01b4536f8.exe
-
Size
590KB
-
MD5
3a783f218b4e0020b0443a8102b76769
-
SHA1
7f326e341fffd97a9b3f4f19aa65f796b38c9312
-
SHA256
efce051b1d799bd344d7b354e5898cccd79a0014593d2034cd6b00d01b4536f8
-
SHA512
599efed9ff6b0ed1ace19ecedbbb6eb607f32709d702354290836ff6e922b5f3029af7890e4f71b60b6b795b7c3215d7722f694bd3bea764f42976537f66b989
-
SSDEEP
12288:tKn7CFjjRsmxegtdYWZlgeodODaZg7sGojMWZBH:o4smN3odODB7CAW/
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-