General
-
Target
6140bb7f66a22e4cbb16472a6e406f145a347e9b2b1fa5151cdbb3de240f728a
-
Size
637KB
-
Sample
240330-bng3qadg5z
-
MD5
6a32aac13c9fcf7580d1f6d8348cdcb1
-
SHA1
98c83f42f925655ffadc244acebabc7f82340819
-
SHA256
6140bb7f66a22e4cbb16472a6e406f145a347e9b2b1fa5151cdbb3de240f728a
-
SHA512
c91db571948e0b16b512b5657d4d38fca753876fe88d811b7c29fe6f5438367dc08a4130d812980cb776e9f81b46bd7b95e0ef13ed8ae4c495e6564a58023092
-
SSDEEP
12288:iDsQ2+77kw+bEclKyzjtkrITRT1igLp1DRnf4wReUPjTM9tc:iG+77kJlzjarINQIDnAaeQXX
Static task
static1
Behavioral task
behavioral1
Sample
HDPE SDR 11 OD560- 6 METERS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
HDPE SDR 11 OD560- 6 METERS.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
us2.smtp.mailhostbox.com - Port:
587 - Username:
[email protected] - Password:
@BPkIlloCGraceD7@1 - Email To:
[email protected]
Extracted
Protocol: smtp- Host:
us2.smtp.mailhostbox.com - Port:
587 - Username:
[email protected] - Password:
@BPkIlloCGraceD7@1
Targets
-
-
Target
HDPE SDR 11 OD560- 6 METERS.exe
-
Size
669KB
-
MD5
fafd92db507c1863735ab383ae38f02e
-
SHA1
96939402ae7616b79ec98e1ce9bd6e74613c95ac
-
SHA256
a42865d911ea4df9331b1f440a3c88936caadaed341ee3fd2ffee58436c1ba4e
-
SHA512
6a40a726fa7c432cbb3e197a6f6b44b3c313f036ec7d3b4378dee7dc771e3f070c3d4f6d44e153d63cbd8d2cc50a2e3c1334fc1d4e2ccf8b36b98193bd61b59f
-
SSDEEP
12288:mFLK1DSKw+bEi/LsdatSrqfLTHWsnt3BRnzSwRe9nICPO:mFiDSKZDSaUrqja47nWaeJnPO
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-