General
-
Target
6992391537c5916873e213c285583cc3397364cfd4b7282f0b7edeee0cfaacf1
-
Size
1019KB
-
Sample
240523-cme3eaaa6t
-
MD5
00bfc43d452fd6cdb60e22b42564216f
-
SHA1
713081c814ebb417b1238fded8257e5712042057
-
SHA256
6992391537c5916873e213c285583cc3397364cfd4b7282f0b7edeee0cfaacf1
-
SHA512
8c9c1840edb183a4d3b5777bf71e1a8b2518b4799c1bf80017600137c3eb58d7f1405044d4c6c49fa4e1b14b236f5b6d253caae78bac69401e1b6dc411a9da98
-
SSDEEP
24576:aAHnh+eWsN3skA4RV1Hom2KXMmHakm9Hozi6qrk5:th+ZkldoPK8Yakmme61
Static task
static1
Behavioral task
behavioral1
Sample
6992391537c5916873e213c285583cc3397364cfd4b7282f0b7edeee0cfaacf1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6992391537c5916873e213c285583cc3397364cfd4b7282f0b7edeee0cfaacf1.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.lnidrywall.com - Port:
587 - Username:
[email protected] - Password:
Kauai2006! - Email To:
[email protected]
Targets
-
-
Target
6992391537c5916873e213c285583cc3397364cfd4b7282f0b7edeee0cfaacf1
-
Size
1019KB
-
MD5
00bfc43d452fd6cdb60e22b42564216f
-
SHA1
713081c814ebb417b1238fded8257e5712042057
-
SHA256
6992391537c5916873e213c285583cc3397364cfd4b7282f0b7edeee0cfaacf1
-
SHA512
8c9c1840edb183a4d3b5777bf71e1a8b2518b4799c1bf80017600137c3eb58d7f1405044d4c6c49fa4e1b14b236f5b6d253caae78bac69401e1b6dc411a9da98
-
SSDEEP
24576:aAHnh+eWsN3skA4RV1Hom2KXMmHakm9Hozi6qrk5:th+ZkldoPK8Yakmme61
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-