General
-
Target
7615090de90b379091f499d125db3c25943f3992e9ed09dab3d2a701d11b2b01
-
Size
1019KB
-
Sample
240523-c5cd8sbb33
-
MD5
8f537e91245bcc1510a9867cb88b12ea
-
SHA1
dfc1fac222ea213d44aa9b5de65c83ffbd80ba0c
-
SHA256
7615090de90b379091f499d125db3c25943f3992e9ed09dab3d2a701d11b2b01
-
SHA512
39d687d2f2264136543d92f0ae8aa614fdb34fb8d26684b90bb5a27bd2da4baae1f690dae598109c94a6ac2397af2b61c60bcf05467d1df8611117a33dc1f524
-
SSDEEP
24576:DAHnh+eWsN3skA4RV1Hom2KXMmHasZTWI89PH3g3m32h5:Oh+ZkldoPK8Yasv8NH3d3M
Static task
static1
Behavioral task
behavioral1
Sample
7615090de90b379091f499d125db3c25943f3992e9ed09dab3d2a701d11b2b01.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7615090de90b379091f499d125db3c25943f3992e9ed09dab3d2a701d11b2b01.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://ftp.transotraval.cl - Port:
21 - Username:
[email protected] - Password:
4)7@D4,-Q%Xj
Targets
-
-
Target
7615090de90b379091f499d125db3c25943f3992e9ed09dab3d2a701d11b2b01
-
Size
1019KB
-
MD5
8f537e91245bcc1510a9867cb88b12ea
-
SHA1
dfc1fac222ea213d44aa9b5de65c83ffbd80ba0c
-
SHA256
7615090de90b379091f499d125db3c25943f3992e9ed09dab3d2a701d11b2b01
-
SHA512
39d687d2f2264136543d92f0ae8aa614fdb34fb8d26684b90bb5a27bd2da4baae1f690dae598109c94a6ac2397af2b61c60bcf05467d1df8611117a33dc1f524
-
SSDEEP
24576:DAHnh+eWsN3skA4RV1Hom2KXMmHasZTWI89PH3g3m32h5:Oh+ZkldoPK8Yasv8NH3d3M
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-