General
-
Target
4b22969044e77b31296d270532694da65192908982a8b78bc67940e76ca6d197
-
Size
270KB
-
Sample
240426-cr55dshc3z
-
MD5
e7ed8fc5d3670de47d16ea7022b3943d
-
SHA1
56e1d59ec5b1a1b3bdbf11ab6b49642ceb15ae4e
-
SHA256
4b22969044e77b31296d270532694da65192908982a8b78bc67940e76ca6d197
-
SHA512
f65906107470ce17f0979b63778b57aae49b1fbc081fd24e18efe808b14e7ddc538aa67526fda54b0c1dca5b472d2f7b57da852ce2628959a789d2f1f698342c
-
SSDEEP
3072:6aqb9Pv3nvfLxp2z7aRocL/KHSSkzQV985eBs95NVc:6f9Pv3nvfLrkmRocD+SPMV9nsn
Behavioral task
behavioral1
Sample
4b22969044e77b31296d270532694da65192908982a8b78bc67940e76ca6d197.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4b22969044e77b31296d270532694da65192908982a8b78bc67940e76ca6d197.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.torreperogil.es - Port:
587 - Username:
agente11572@torreperogil.es - Password:
padremiguelantonio - Email To:
jasonleung5577@gmail.com
Extracted
Protocol: smtp- Host:
mail.torreperogil.es - Port:
587 - Username:
agente11572@torreperogil.es - Password:
padremiguelantonio
Targets
-
-
Target
4b22969044e77b31296d270532694da65192908982a8b78bc67940e76ca6d197
-
Size
270KB
-
MD5
e7ed8fc5d3670de47d16ea7022b3943d
-
SHA1
56e1d59ec5b1a1b3bdbf11ab6b49642ceb15ae4e
-
SHA256
4b22969044e77b31296d270532694da65192908982a8b78bc67940e76ca6d197
-
SHA512
f65906107470ce17f0979b63778b57aae49b1fbc081fd24e18efe808b14e7ddc538aa67526fda54b0c1dca5b472d2f7b57da852ce2628959a789d2f1f698342c
-
SSDEEP
3072:6aqb9Pv3nvfLxp2z7aRocL/KHSSkzQV985eBs95NVc:6f9Pv3nvfLrkmRocD+SPMV9nsn
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-