General
-
Target
Factura Comerciale___DHL_BL#6797986766768978097644685456.exe
-
Size
1.1MB
-
Sample
240328-hx8qcsfb5y
-
MD5
f13d05cc8f19fb8d9dcf20bdadbb9958
-
SHA1
5beecbd5390b513c84db858b9a446ced0c9b344d
-
SHA256
7cb01a819ef47af0878b8038ec24e06a2a659d9891c3b39d4a0f56a2578d21ea
-
SHA512
06792186ed979cefab6acc829361af3bade0c05ed7aadadba25fea862968dfa295e1df8f617ff01b6c6a9d114a42b4106d0accf650377b0e10be4cdf9fe4b57d
-
SSDEEP
24576:HqDEvCTbMWu7rQYlBQcBiT6rprG8aCauTz9lCW9+b:HTvC/MTQYxsWR7aCBE
Static task
static1
Behavioral task
behavioral1
Sample
Factura Comerciale___DHL_BL#6797986766768978097644685456.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Factura Comerciale___DHL_BL#6797986766768978097644685456.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
cp8nl.hyperhost.ua - Port:
587 - Username:
sweetlog@minelogbox.sbs - Password:
7213575aceACE@#$ - Email To:
sweet@minelogbox.sbs
Targets
-
-
Target
Factura Comerciale___DHL_BL#6797986766768978097644685456.exe
-
Size
1.1MB
-
MD5
f13d05cc8f19fb8d9dcf20bdadbb9958
-
SHA1
5beecbd5390b513c84db858b9a446ced0c9b344d
-
SHA256
7cb01a819ef47af0878b8038ec24e06a2a659d9891c3b39d4a0f56a2578d21ea
-
SHA512
06792186ed979cefab6acc829361af3bade0c05ed7aadadba25fea862968dfa295e1df8f617ff01b6c6a9d114a42b4106d0accf650377b0e10be4cdf9fe4b57d
-
SSDEEP
24576:HqDEvCTbMWu7rQYlBQcBiT6rprG8aCauTz9lCW9+b:HTvC/MTQYxsWR7aCBE
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-