General
-
Target
1.exe
-
Size
1003KB
-
Sample
240508-hccr7aaa83
-
MD5
71dc61d925e2d85ceb8c8154169fa281
-
SHA1
b20a57fc63a4e145909a3e7a5cb95577a3d53999
-
SHA256
ef0446d3b042668d828d7e17c74ec1f35f2d7d9840df196de16bcb5ad78dd3c1
-
SHA512
932dcb879b84537707ab84b2cc5d2de05f71441f433db7fb2520a8c19a040665cae8b2d60c20ef21966d8ea87af966b18abc83b5dc4c4d582d6a003a245c577e
-
SSDEEP
24576:e4lavt0LkLL9IMixoEgea+h6DPFb2q9MmCS:Jkwkn9IMHea+UbF6aPCS
Static task
static1
Behavioral task
behavioral1
Sample
1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
zaidarabia.com - Port:
587 - Username:
[email protected] - Password:
Golddust007! - Email To:
[email protected]
Targets
-
-
Target
1.exe
-
Size
1003KB
-
MD5
71dc61d925e2d85ceb8c8154169fa281
-
SHA1
b20a57fc63a4e145909a3e7a5cb95577a3d53999
-
SHA256
ef0446d3b042668d828d7e17c74ec1f35f2d7d9840df196de16bcb5ad78dd3c1
-
SHA512
932dcb879b84537707ab84b2cc5d2de05f71441f433db7fb2520a8c19a040665cae8b2d60c20ef21966d8ea87af966b18abc83b5dc4c4d582d6a003a245c577e
-
SSDEEP
24576:e4lavt0LkLL9IMixoEgea+h6DPFb2q9MmCS:Jkwkn9IMHea+UbF6aPCS
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-