General
-
Target
7b5b3b4a6c48e02876912202d71c7a1eb9781dad619e578029127921143ff8cb
-
Size
1015KB
-
Sample
240521-b1at6sed3y
-
MD5
35b192754ef411c65e6584e8f3cc3e43
-
SHA1
9752572ae0dc227f7c59d941f98c3bbc91b8c2df
-
SHA256
7b5b3b4a6c48e02876912202d71c7a1eb9781dad619e578029127921143ff8cb
-
SHA512
153a7e19d5d27c209f21057a9225f2b5874cfaefe5bf729e468bede5e13e183c8e3faf88eaadcab770fc8293df11eee15e1fac8c136302aba6865c013de48af9
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaIM2p6iJ935:gh+ZkldoPK8YaIM2siZ
Static task
static1
Behavioral task
behavioral1
Sample
7b5b3b4a6c48e02876912202d71c7a1eb9781dad619e578029127921143ff8cb.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7b5b3b4a6c48e02876912202d71c7a1eb9781dad619e578029127921143ff8cb.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://ftp.enviroclean.pe - Port:
21 - Username:
[email protected] - Password:
Hw-nwKQiQg@n
Targets
-
-
Target
7b5b3b4a6c48e02876912202d71c7a1eb9781dad619e578029127921143ff8cb
-
Size
1015KB
-
MD5
35b192754ef411c65e6584e8f3cc3e43
-
SHA1
9752572ae0dc227f7c59d941f98c3bbc91b8c2df
-
SHA256
7b5b3b4a6c48e02876912202d71c7a1eb9781dad619e578029127921143ff8cb
-
SHA512
153a7e19d5d27c209f21057a9225f2b5874cfaefe5bf729e468bede5e13e183c8e3faf88eaadcab770fc8293df11eee15e1fac8c136302aba6865c013de48af9
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaIM2p6iJ935:gh+ZkldoPK8YaIM2siZ
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-