General
-
Target
doc222378670008869955430341.exe
-
Size
872KB
-
Sample
240603-ltyb1abg75
-
MD5
0554428077178ad08f6323a63f539c20
-
SHA1
83c73ab3c57ad7c32d690b9f3016f1548535c1ff
-
SHA256
91aaa529420c12fbd34da00273de2453c206c09d994802f0b2eb7e89fbe7a0c2
-
SHA512
9b2ceb31765f82bf4d23175ec2ba58056df6aaf8bdd026fa28767baf024d81ffa7fcc399457c1c206d74e3fae2e567ebb4d3d7424846f9aa83f777395beb82b6
-
SSDEEP
12288:jjADhreCPb6Al2sNSj6c1WQK0DvFHPBVcjstytYyn37lKzdlqLPHTVHKL+wm:jjADhreCPc2YDv54B7l8vqzRHKi
Static task
static1
Behavioral task
behavioral1
Sample
doc222378670008869955430341.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
doc222378670008869955430341.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://ftp.carbognin.it - Port:
21 - Username:
[email protected] - Password:
59Cif8wZUH#X
Targets
-
-
Target
doc222378670008869955430341.exe
-
Size
872KB
-
MD5
0554428077178ad08f6323a63f539c20
-
SHA1
83c73ab3c57ad7c32d690b9f3016f1548535c1ff
-
SHA256
91aaa529420c12fbd34da00273de2453c206c09d994802f0b2eb7e89fbe7a0c2
-
SHA512
9b2ceb31765f82bf4d23175ec2ba58056df6aaf8bdd026fa28767baf024d81ffa7fcc399457c1c206d74e3fae2e567ebb4d3d7424846f9aa83f777395beb82b6
-
SSDEEP
12288:jjADhreCPb6Al2sNSj6c1WQK0DvFHPBVcjstytYyn37lKzdlqLPHTVHKL+wm:jjADhreCPc2YDv54B7l8vqzRHKi
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-