General
-
Target
f88cb50d7f90b0aa92b36f775f526f9a6ab1f39dda5e3338cc01e39e4f2c51b2
-
Size
750KB
-
Sample
240507-b18ffacf21
-
MD5
1e88b5b633ea034444c8afe9c2d861da
-
SHA1
9d9dedc883d4b80eb55992b86f9c53b8cf8055c6
-
SHA256
f88cb50d7f90b0aa92b36f775f526f9a6ab1f39dda5e3338cc01e39e4f2c51b2
-
SHA512
03e462fe894568354de9fe2d6479e25b8ba63239d769163a4e1ff0de8cf7095723f783f48f738509b2a4a39200f5f4d0ed2bd6e1d305850bc7ac10970875e84f
-
SSDEEP
12288:xxzyV5zNooyr5VI2+Zfd0BCQd/mKw7rxXsXNdln9fx/8uHL4PFV8DZLd+Xb4CF2v:xxzyvzyrTu9cCQd/mKw7rhs9bz5DRd+s
Malware Config
Extracted
Protocol: smtp- Host:
pathway-professionals.com - Port:
587 - Username:
[email protected] - Password:
Victor12340@
Targets
-
-
Target
detailed_inventory list.exe
-
Size
1.3MB
-
MD5
ecc1957c533cf2349d9fc098416e3ccb
-
SHA1
431d19037b7e42d5cd9dc8b2f0b74d1afba1dbf6
-
SHA256
1508ae003b124c788d43b4cdfc2234c304ec557cffb088280671893e3c89bab0
-
SHA512
e11555309666d894ca448f0f51f94ec20a6761c4b00e89953a8b04cf7f1d4ed0a0fd56f7ee5bbc951df8a0c5119205d793c551bf5b4cb4762c93afb50c5d2e22
-
SSDEEP
24576:bqDEvCTbMWu7rQYlBQcBiT6rprG8a01CKvDfd+1bP:bTvC/MTQYxsWR7a08Kvjcb
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Detect ZGRat V1
-
ZGRat
ZGRat is remote access trojan written in C#.
-
Suspicious use of SetThreadContext
-