General
- Target 3a63d678ce5318dce83c3ebabe2daad7fae4b324f6dabeb7199719a464313ad8
- Size 720KB
- Sample240521-bdybysda37
- SHA256 3a63d678ce5318dce83c3ebabe2daad7fae4b324f6dabeb7199719a464313ad8
- MD5 2bee3a88220e7fe1c07a153b134e6b27
- SHA1 75ff17e5ae97389b1bed55d28355fc33ca69ea33
- SHA512 68474244a01b623c333c52f014593c6c3809518d2f29e41e0d701440f54a7a502c8a623ac6f4a61ca6419763d649c81cd370154324eac36ae53a52b06760833d
- SSDEEP 12288:QQPAq0mIMUCA8GfkNekupi4OdnqAhdusnNRCvfbVQvgF1Sf3NhJ/Jym/HEhY3BF/:kq6MvAf8NiU4jAhduyWvT2vgK3J/80Hl
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3a63d678ce5318dce83c3ebabe2daad7fae4b324f6dabeb7199719a464313ad8.exe
Resource
win7-20231129-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
3a63d678ce5318dce83c3ebabe2daad7fae4b324f6dabeb7199719a464313ad8.exe
Resource
win10v2004-20240508-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
emidco.com
-
Port
587
-
Username
-
Password
DMmpPxx9c
-
Email to
Targets
-
- Target 3a63d678ce5318dce83c3ebabe2daad7fae4b324f6dabeb7199719a464313ad8
- Size 720KB
- SHA256 3a63d678ce5318dce83c3ebabe2daad7fae4b324f6dabeb7199719a464313ad8
- MD5 2bee3a88220e7fe1c07a153b134e6b27
- SHA1 75ff17e5ae97389b1bed55d28355fc33ca69ea33
- SHA512 68474244a01b623c333c52f014593c6c3809518d2f29e41e0d701440f54a7a502c8a623ac6f4a61ca6419763d649c81cd370154324eac36ae53a52b06760833d
- SSDEEP 12288:QQPAq0mIMUCA8GfkNekupi4OdnqAhdusnNRCvfbVQvgF1Sf3NhJ/Jym/HEhY3BF/:kq6MvAf8NiU4jAhduyWvT2vgK3J/80Hl
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext