General
- Target 3.exe
- Size 1021KB
- Sample240508-sww1aade82
- SHA256 bde8e03d2fa68bfe6e57bcaf7b0e63340dfb86d9be603bb4e5243438efca8bd6
- MD5 398c3b8993b24d39e863869757b3e426
- SHA1 b06281c6f8fb44ef488b9d27526881341d7b4fc4
- SHA512 215b24cec77f3f6bb707563b0cc1782e0f9290973373c50f6ebe90ff895f8dcc6a5f2762b56c73e6b5b8a8f0c5509cb059c6825d3aae69eb2758c528f691bcaf
- SSDEEP 24576:F4lavt0LkLL9IMixoEgearxyMmBiZ0Pq9MmCS:ckwkn9IMHearekZWaPCS
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
3.exe
Resource
win7-20231129-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
3.exe
Resource
win10v2004-20240508-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
zaidarabia.com
-
Port
587
-
Username
-
Password
Golddust007!
-
Email to
Targets
-
- Target 3.exe
- Size 1021KB
- SHA256 bde8e03d2fa68bfe6e57bcaf7b0e63340dfb86d9be603bb4e5243438efca8bd6
- MD5 398c3b8993b24d39e863869757b3e426
- SHA1 b06281c6f8fb44ef488b9d27526881341d7b4fc4
- SHA512 215b24cec77f3f6bb707563b0cc1782e0f9290973373c50f6ebe90ff895f8dcc6a5f2762b56c73e6b5b8a8f0c5509cb059c6825d3aae69eb2758c528f691bcaf
- SSDEEP 24576:F4lavt0LkLL9IMixoEgearxyMmBiZ0Pq9MmCS:ckwkn9IMHearekZWaPCS
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext