General
- Target d09ddbd38b06d082c36ba91814c4ea12.exe
- Size 1011KB
- Sample240609-c3kmtscc9x
- SHA256 c1dc498ac1f64dcf63b7c536c5e95e2561054a3ae4e95df36975426032f680ac
- MD5 d09ddbd38b06d082c36ba91814c4ea12
- SHA1 63c78b2dbc4000e322547520b58b666676c3ee4d
- SHA512 11fca048e084ab54ad20169d99ecacaa26f955d32d6795346e080faefbfd0d3a43bebd6cbaadb238735d0940367711c5ef61996c92f191151c6e220aa582c444
- SSDEEP 24576:vAHnh+eWsN3skA4RV1Hom2KXMmHaN3gw/F16zF5:Sh+ZkldoPK8YaNQwdwj
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
d09ddbd38b06d082c36ba91814c4ea12.exe
Resource
win7-20240221-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
d09ddbd38b06d082c36ba91814c4ea12.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.dominostores.top
-
Port
587
-
Username
-
Password
vqpF.#QRT234
-
Email to
Targets
-
- Target d09ddbd38b06d082c36ba91814c4ea12.exe
- Size 1011KB
- SHA256 c1dc498ac1f64dcf63b7c536c5e95e2561054a3ae4e95df36975426032f680ac
- MD5 d09ddbd38b06d082c36ba91814c4ea12
- SHA1 63c78b2dbc4000e322547520b58b666676c3ee4d
- SHA512 11fca048e084ab54ad20169d99ecacaa26f955d32d6795346e080faefbfd0d3a43bebd6cbaadb238735d0940367711c5ef61996c92f191151c6e220aa582c444
- SSDEEP 24576:vAHnh+eWsN3skA4RV1Hom2KXMmHaN3gw/F16zF5:Sh+ZkldoPK8YaNQwdwj
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext