General
-
Target
a720607ffa5644d67d0afa04b02a7a00ae7950080a9ad67cfbc31f5ad63b3f33
-
Size
1.2MB
-
Sample
240521-b3h9bsed9z
-
MD5
3fe55989e3813ee29f063b4f018836a1
-
SHA1
541d5c97541dc9fb6d80fd3df54c45ef46d8fbf5
-
SHA256
a720607ffa5644d67d0afa04b02a7a00ae7950080a9ad67cfbc31f5ad63b3f33
-
SHA512
d1d051deec01a67e227892e3682e4cef50e44bc50fcc3876bab1745d6c06d4a765b92ad53a44f25e635be72742af9e366da4982f94d7ec2b35284fe4e61e8fb8
-
SSDEEP
24576:uVT7rhCqd/N6qVlyug8IEv3hjXdlVD/HA:uKqd1xVl3IEvRVI
Static task
static1
Behavioral task
behavioral1
Sample
a720607ffa5644d67d0afa04b02a7a00ae7950080a9ad67cfbc31f5ad63b3f33.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a720607ffa5644d67d0afa04b02a7a00ae7950080a9ad67cfbc31f5ad63b3f33.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://ftp.absorbante-calitate.ro - Port:
21 - Username:
[email protected] - Password:
%)#m~ZLV4-$n
Extracted
Protocol: ftp- Host:
ftp.absorbante-calitate.ro - Port:
21 - Username:
[email protected] - Password:
%)#m~ZLV4-$n
Targets
-
-
Target
a720607ffa5644d67d0afa04b02a7a00ae7950080a9ad67cfbc31f5ad63b3f33
-
Size
1.2MB
-
MD5
3fe55989e3813ee29f063b4f018836a1
-
SHA1
541d5c97541dc9fb6d80fd3df54c45ef46d8fbf5
-
SHA256
a720607ffa5644d67d0afa04b02a7a00ae7950080a9ad67cfbc31f5ad63b3f33
-
SHA512
d1d051deec01a67e227892e3682e4cef50e44bc50fcc3876bab1745d6c06d4a765b92ad53a44f25e635be72742af9e366da4982f94d7ec2b35284fe4e61e8fb8
-
SSDEEP
24576:uVT7rhCqd/N6qVlyug8IEv3hjXdlVD/HA:uKqd1xVl3IEvRVI
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-