General
-
Target
4dd1ec5df036681f5a1e6b50bf0e449c6e396c536cd2037f7691e214e00c2b16
-
Size
654KB
-
Sample
240330-rzyslshb42
-
MD5
342f059472f3b0eba755742421856d6e
-
SHA1
2fbd2bb10513da4df3df8910b74d89744bb31a13
-
SHA256
4dd1ec5df036681f5a1e6b50bf0e449c6e396c536cd2037f7691e214e00c2b16
-
SHA512
0fc6b35882519e5e3b9a8cfba500c67e23636782536580150defeeaedaced107b98b85ddf7186b8c5790f97e452c76586ef05b352d7630a2e6de89d06beceb9c
-
SSDEEP
12288:xo7KY6+qoDj+W6n7z+Vd0T2+LOVR2LCMtT2fDsCD1aMT7tA:6uv+qoqn3+DR2rCD1aMy
Static task
static1
Behavioral task
behavioral1
Sample
4dd1ec5df036681f5a1e6b50bf0e449c6e396c536cd2037f7691e214e00c2b16.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
4dd1ec5df036681f5a1e6b50bf0e449c6e396c536cd2037f7691e214e00c2b16.exe
Resource
win11-20240221-en
Malware Config
Extracted
agenttesla
https://api.telegram.org/bot5905440472:AAH7yJYEREM-Uefb6Xv04uo_iKD7w2txk9k/
Targets
-
-
Target
4dd1ec5df036681f5a1e6b50bf0e449c6e396c536cd2037f7691e214e00c2b16
-
Size
654KB
-
MD5
342f059472f3b0eba755742421856d6e
-
SHA1
2fbd2bb10513da4df3df8910b74d89744bb31a13
-
SHA256
4dd1ec5df036681f5a1e6b50bf0e449c6e396c536cd2037f7691e214e00c2b16
-
SHA512
0fc6b35882519e5e3b9a8cfba500c67e23636782536580150defeeaedaced107b98b85ddf7186b8c5790f97e452c76586ef05b352d7630a2e6de89d06beceb9c
-
SSDEEP
12288:xo7KY6+qoDj+W6n7z+Vd0T2+LOVR2LCMtT2fDsCD1aMT7tA:6uv+qoqn3+DR2rCD1aMy
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-