General
- Target 50e85468becf2a5b858a1cd14362899128ccda25c01b428f52ddc033bb95ad65
- Size 668KB
- Sample240603-rlpmsaae84
- SHA256 50e85468becf2a5b858a1cd14362899128ccda25c01b428f52ddc033bb95ad65
- MD5 fcb5172319bbca6eb3c03d589404c926
- SHA1 0492efdb72f1800210283243ee5be8f08ec3874a
- SHA512 0db4d2a0e7d1cd4ff96e31b43a0dc3f49fd51bbcddc36ba1c66ecff2d310841bbbd373953e9cecfc3228281ebd23e08e4bb853dfad1e2202ccc2945aa4b05fc3
- SSDEEP 12288:xECCVWhoP+R/WAGVUqqArK/8nrzJs3n4tP5UBtEZ5:xuZP+WAGVUqqA+qsobeE/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
50e85468becf2a5b858a1cd14362899128ccda25c01b428f52ddc033bb95ad65.exe
Resource
win7-20240220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
50e85468becf2a5b858a1cd14362899128ccda25c01b428f52ddc033bb95ad65.exe
Resource
win10v2004-20240426-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.medicoscience.ro
-
Port
587
-
Username
-
Password
Ms@0001
-
Email to
Targets
-
- Target 50e85468becf2a5b858a1cd14362899128ccda25c01b428f52ddc033bb95ad65
- Size 668KB
- SHA256 50e85468becf2a5b858a1cd14362899128ccda25c01b428f52ddc033bb95ad65
- MD5 fcb5172319bbca6eb3c03d589404c926
- SHA1 0492efdb72f1800210283243ee5be8f08ec3874a
- SHA512 0db4d2a0e7d1cd4ff96e31b43a0dc3f49fd51bbcddc36ba1c66ecff2d310841bbbd373953e9cecfc3228281ebd23e08e4bb853dfad1e2202ccc2945aa4b05fc3
- SSDEEP 12288:xECCVWhoP+R/WAGVUqqArK/8nrzJs3n4tP5UBtEZ5:xuZP+WAGVUqqA+qsobeE/
- MD5 SHA1 SHA512 SSDEEP
Score10/10AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
Suspicious use of SetThreadContext