General
-
Target
95434e14f7937ffe2702c3fd491f07957188cc1f09b5b26bf7161ece6a2e3744
-
Size
854KB
-
Sample
240612-cjx4taydmk
-
MD5
85e1497f856ebf941a434726a379ab9e
-
SHA1
0a48887939c83406be5ae2eebaba199b30e32235
-
SHA256
95434e14f7937ffe2702c3fd491f07957188cc1f09b5b26bf7161ece6a2e3744
-
SHA512
9561f9b7761f59d6522f1ee1a1f82e69d057ff2f95690c9a87d295bd1037f51e6b50c0188ec74d76383d1c8c59e5218361976da3b91c6731bafe7366b8252bdc
-
SSDEEP
24576:+g61jjk0LAta9A9/DIIO612WaclORGF9M/ebAGQsv:1LO61cczFK/uJv
Static task
static1
Behavioral task
behavioral1
Sample
95434e14f7937ffe2702c3fd491f07957188cc1f09b5b26bf7161ece6a2e3744.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
95434e14f7937ffe2702c3fd491f07957188cc1f09b5b26bf7161ece6a2e3744.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.groupmt.vn - Port:
587 - Username:
[email protected] - Password:
4j37SF2n8e - Email To:
[email protected]
Targets
-
-
Target
95434e14f7937ffe2702c3fd491f07957188cc1f09b5b26bf7161ece6a2e3744
-
Size
854KB
-
MD5
85e1497f856ebf941a434726a379ab9e
-
SHA1
0a48887939c83406be5ae2eebaba199b30e32235
-
SHA256
95434e14f7937ffe2702c3fd491f07957188cc1f09b5b26bf7161ece6a2e3744
-
SHA512
9561f9b7761f59d6522f1ee1a1f82e69d057ff2f95690c9a87d295bd1037f51e6b50c0188ec74d76383d1c8c59e5218361976da3b91c6731bafe7366b8252bdc
-
SSDEEP
24576:+g61jjk0LAta9A9/DIIO612WaclORGF9M/ebAGQsv:1LO61cczFK/uJv
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-