General
- Target 1.exe
- Size 1003KB
- Sample240508-hccr7aaa83
- SHA256 ef0446d3b042668d828d7e17c74ec1f35f2d7d9840df196de16bcb5ad78dd3c1
- MD5 71dc61d925e2d85ceb8c8154169fa281
- SHA1 b20a57fc63a4e145909a3e7a5cb95577a3d53999
- SHA512 932dcb879b84537707ab84b2cc5d2de05f71441f433db7fb2520a8c19a040665cae8b2d60c20ef21966d8ea87af966b18abc83b5dc4c4d582d6a003a245c577e
- SSDEEP 24576:e4lavt0LkLL9IMixoEgea+h6DPFb2q9MmCS:Jkwkn9IMHea+UbF6aPCS
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
1.exe
Resource
win7-20231129-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
1.exe
Resource
win10v2004-20240426-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
zaidarabia.com
-
Port
587
-
Username
-
Password
Golddust007!
-
Email to
Targets
-
- Target 1.exe
- Size 1003KB
- SHA256 ef0446d3b042668d828d7e17c74ec1f35f2d7d9840df196de16bcb5ad78dd3c1
- MD5 71dc61d925e2d85ceb8c8154169fa281
- SHA1 b20a57fc63a4e145909a3e7a5cb95577a3d53999
- SHA512 932dcb879b84537707ab84b2cc5d2de05f71441f433db7fb2520a8c19a040665cae8b2d60c20ef21966d8ea87af966b18abc83b5dc4c4d582d6a003a245c577e
- SSDEEP 24576:e4lavt0LkLL9IMixoEgea+h6DPFb2q9MmCS:Jkwkn9IMHea+UbF6aPCS
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext