General
-
Target
ac92340b7c90c154fb183ae88c936899.bin
-
Size
82KB
-
Sample
240517-dscd5seg7s
-
MD5
a9469714bcd3c59d13fb91821ea062e7
-
SHA1
0f6eed305c944ad027f1c1a174d054644b88289e
-
SHA256
4f173fa77a34ec65fe53edd86564df52ab0b0108ce91f7d4f161e36c1a24d62c
-
SHA512
2485ae5506d38a434fbf33d71a455661577199bd13e22119ff6066a736c093934a6033e9b00f52456988b1f09bfdae8e2be916c40d24e3b36a67e24d73113b3f
-
SSDEEP
1536:Q6vjXD7DSGEVt2W2U9VWd1Q3hMMzOjeADoXWskh84aOvpz1iR/FM8Uu4xjCffGVy:PjGGEVtx3I1QR1ijimjUOv1MRdyxW+7O
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.worlorderbillions.top - Port:
587 - Username:
[email protected] - Password:
=;=yKWThEGx- - Email To:
[email protected]
Extracted
Protocol: smtp- Host:
mail.worlorderbillions.top - Port:
587 - Username:
[email protected] - Password:
=;=yKWThEGx-
Targets
-
-
Target
b6febf9364b430f85d1a84ca321dd488abd2e95d0ab184779837fbd0527abf0f.exe
-
Size
233KB
-
MD5
ac92340b7c90c154fb183ae88c936899
-
SHA1
e9c706901be4cc71ee8eaffd1982fbf5060c1e24
-
SHA256
b6febf9364b430f85d1a84ca321dd488abd2e95d0ab184779837fbd0527abf0f
-
SHA512
6897ad0fa99e4eb3257d0e57da1c92230833777a8e6cfd6ab48b4ef98fcf6b624dac5c645c168df3cb4b078346070ad248ac238af5f53717d20609ab5c1b90c3
-
SSDEEP
3072:aQplR1ZR7Lo1QJFebf4dv/WK43O/54DLAgYfvt:/plR1ZR7Lo1c8b2/K3OaAgM
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-