General
-
Target
cloud.exe
-
Size
1.1MB
-
Sample
240327-m3d56aaf42
-
MD5
832eec80b76d70fc68c511965da69ccc
-
SHA1
9ea0a03a1efb97b3aecc456950af053d813e0afe
-
SHA256
4f7824c1dee1a075898e66126a9f6678c41d77507e6510ca88a597ccc8a05b55
-
SHA512
ed6350dc50d935aef423d27506b3e4dc15a4b26b3f5fe7fbbac0ab2c04c0ddb3552f8e04845061ef07fea9fe714d0c2c512bcc42ff561617f94be7c2b0b775cf
-
SSDEEP
24576:YqDEvCTbMWu7rQYlBQcBiT6rprG8aF83aszMg15alQt3d:YTvC/MTQYxsWR7aFwfMgzK
Static task
static1
Behavioral task
behavioral1
Sample
cloud.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cloud.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
smtp.ionos.es - Port:
587 - Username:
[email protected] - Password:
Pula0001* - Email To:
[email protected]
Targets
-
-
Target
cloud.exe
-
Size
1.1MB
-
MD5
832eec80b76d70fc68c511965da69ccc
-
SHA1
9ea0a03a1efb97b3aecc456950af053d813e0afe
-
SHA256
4f7824c1dee1a075898e66126a9f6678c41d77507e6510ca88a597ccc8a05b55
-
SHA512
ed6350dc50d935aef423d27506b3e4dc15a4b26b3f5fe7fbbac0ab2c04c0ddb3552f8e04845061ef07fea9fe714d0c2c512bcc42ff561617f94be7c2b0b775cf
-
SSDEEP
24576:YqDEvCTbMWu7rQYlBQcBiT6rprG8aF83aszMg15alQt3d:YTvC/MTQYxsWR7aFwfMgzK
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-