General
-
Target
ac6c43af3223aacabdf489732c108121.bin
-
Size
650KB
-
Sample
240609-eszp4sdd91
-
MD5
c6bfce4151317820728f5fb704fc24aa
-
SHA1
f52ccc3eb8cfa4d916790bf12ea157486d6210a0
-
SHA256
8f987cc495fd7871ed120ed351d1235ecf354a7ef0a8be3138c8a7916e378179
-
SHA512
72dc87125dbd50aaa85fe1f78cf887fc642a84d1e1d6f9b6d54c49a90c004a6029d5202ac9a6ed0ea91d9b71ee0c6953d67194a763e24f87cb3a6d505dc4e0a2
-
SSDEEP
12288:xRPBBZ+AIBiFgLnvzVq2WP4EmPavYbzalboeLZ4At4bZjWzuHMIZsPS:xRPB/+FBBLLk224pavKWpoeLuAt4bJrF
Static task
static1
Behavioral task
behavioral1
Sample
TX895780888999-268900DRU908890032890.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
TX895780888999-268900DRU908890032890.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
cp8nl.hyperhost.ua - Port:
587 - Username:
[email protected] - Password:
@qwerty90123 - Email To:
[email protected]
Targets
-
-
Target
TX895780888999-268900DRU908890032890.exe
-
Size
1.1MB
-
MD5
eab04ba8851e5ff9a16555aa714be99c
-
SHA1
d8bd9ac62747f146088d69cc4f97385535c78241
-
SHA256
c0cb57fc9baa9ee1d50147c106a363d2c6533f39f3cc4d509294b1faeef9eac6
-
SHA512
79a19e05c33eb5fd817f1151d673278b8a1c0fdca6e3d1fbb8684224608690141c436fd63e30b0e89504224ef484909369859a5af436b47c775d85e5532c618c
-
SSDEEP
24576:XAHnh+eWsN3skA4RV1Hom2KXMmHaJqL08fAAW5:Kh+ZkldoPK8YaJqLJfAR
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-