General
-
Target
ca34a0864ead6094c2f25312a0c47724dd68d44bea3b28dfddaeb3ad6e1c230a
-
Size
92KB
-
Sample
240430-b7b1tahc9t
-
MD5
3f08c070ea53b9a636277c17501d6feb
-
SHA1
2710f6de4ddd2d806ec5ee2040b6831968f93dbc
-
SHA256
ca34a0864ead6094c2f25312a0c47724dd68d44bea3b28dfddaeb3ad6e1c230a
-
SHA512
dd8aaed22d0f36c32a12afe6ba37f0b1f15deb93c9bea603f8c2d79d1c8f232040b47dd55b20533a7a6eba62e4e8bec46048f59fa138bfe2fa7048fad4e83c49
-
SSDEEP
768:IBJxCRmFOQAi0R6xdOtAbDcMepNMjIiH/h/lIij1I9O3dVeSyLnQba6RAcj:uJARE7BDcMephijhfyMtAcj
Static task
static1
Behavioral task
behavioral1
Sample
ca34a0864ead6094c2f25312a0c47724dd68d44bea3b28dfddaeb3ad6e1c230a.exe
Resource
win7-20240220-en
Malware Config
Extracted
Protocol: smtp- Host:
mail.macfinmail.com - Port:
587 - Username:
[email protected] - Password:
^6&Z=C94llIn
Extracted
agenttesla
Protocol: smtp- Host:
mail.macfinmail.com - Port:
587 - Username:
[email protected] - Password:
^6&Z=C94llIn - Email To:
[email protected]
Targets
-
-
Target
ca34a0864ead6094c2f25312a0c47724dd68d44bea3b28dfddaeb3ad6e1c230a
-
Size
92KB
-
MD5
3f08c070ea53b9a636277c17501d6feb
-
SHA1
2710f6de4ddd2d806ec5ee2040b6831968f93dbc
-
SHA256
ca34a0864ead6094c2f25312a0c47724dd68d44bea3b28dfddaeb3ad6e1c230a
-
SHA512
dd8aaed22d0f36c32a12afe6ba37f0b1f15deb93c9bea603f8c2d79d1c8f232040b47dd55b20533a7a6eba62e4e8bec46048f59fa138bfe2fa7048fad4e83c49
-
SSDEEP
768:IBJxCRmFOQAi0R6xdOtAbDcMepNMjIiH/h/lIij1I9O3dVeSyLnQba6RAcj:uJARE7BDcMephijhfyMtAcj
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Detect ZGRat V1
-
Suspicious use of SetThreadContext
-