General
-
Target
b2ebb908944dcf31b253f02097b86b3e1f96fe094bbcc7c2c37718ade401991c.exe
-
Size
1005KB
-
Sample
240523-q3hecsdd46
-
MD5
753373ea799f4286a93a3f4527b3888b
-
SHA1
a6865cc98ab5659ed16eb3781100d0b85ba86af3
-
SHA256
b2ebb908944dcf31b253f02097b86b3e1f96fe094bbcc7c2c37718ade401991c
-
SHA512
5fbe15c82873bf667ef26ce18703f3883e724456e379795bee989f841b9ff002430be5d8b4382f84e30bb8982ccb67af10d61d683422158928f651d1441e0555
-
SSDEEP
24576:WAHnh+eWsN3skA4RV1Hom2KXMmHax/yNI17L/i5:xh+ZkldoPK8YaxuS7M
Static task
static1
Behavioral task
behavioral1
Sample
b2ebb908944dcf31b253f02097b86b3e1f96fe094bbcc7c2c37718ade401991c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b2ebb908944dcf31b253f02097b86b3e1f96fe094bbcc7c2c37718ade401991c.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://ftp.corpsa.net - Port:
21 - Username:
[email protected] - Password:
ko=8J2,OjDt,
Targets
-
-
Target
b2ebb908944dcf31b253f02097b86b3e1f96fe094bbcc7c2c37718ade401991c.exe
-
Size
1005KB
-
MD5
753373ea799f4286a93a3f4527b3888b
-
SHA1
a6865cc98ab5659ed16eb3781100d0b85ba86af3
-
SHA256
b2ebb908944dcf31b253f02097b86b3e1f96fe094bbcc7c2c37718ade401991c
-
SHA512
5fbe15c82873bf667ef26ce18703f3883e724456e379795bee989f841b9ff002430be5d8b4382f84e30bb8982ccb67af10d61d683422158928f651d1441e0555
-
SSDEEP
24576:WAHnh+eWsN3skA4RV1Hom2KXMmHax/yNI17L/i5:xh+ZkldoPK8YaxuS7M
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-