General
- Target 040a64aa1109fd85e06d523bd7f78abd8d895329eb0e50605861a769e0277cb5.exe
- Size 2.3MB
- Sample240612-rey8ms1fml
- SHA256 040a64aa1109fd85e06d523bd7f78abd8d895329eb0e50605861a769e0277cb5
- MD5 bebbe9d337d411a7d7718d539ed2df29
- SHA1 09641a33c9751575425bd980bd5ee6695ead3fc7
- SHA512 c9bbe55051df35ad89b54175559560fb9d010c55e7f9219f3b4eeee98b768c374a59797f22adbca00dae2aba25d1f093045d15ff894df2a2d7effd68aa9c60a5
- SSDEEP 3072:hnJXhEduoz6TeqBeTtme9KxbDgqc0vjGQCkqQthaEgMXooudQr8JkgzUBdp/VcWa:hnJycb
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
040a64aa1109fd85e06d523bd7f78abd8d895329eb0e50605861a769e0277cb5.exe
Resource
win7-20240508-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
040a64aa1109fd85e06d523bd7f78abd8d895329eb0e50605861a769e0277cb5.exe
Resource
win10v2004-20240226-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.blancahotel.com
-
Port
587
-
Username
-
Password
J4OsTW6J
-
Email to
Targets
-
- Target 040a64aa1109fd85e06d523bd7f78abd8d895329eb0e50605861a769e0277cb5.exe
- Size 2.3MB
- SHA256 040a64aa1109fd85e06d523bd7f78abd8d895329eb0e50605861a769e0277cb5
- MD5 bebbe9d337d411a7d7718d539ed2df29
- SHA1 09641a33c9751575425bd980bd5ee6695ead3fc7
- SHA512 c9bbe55051df35ad89b54175559560fb9d010c55e7f9219f3b4eeee98b768c374a59797f22adbca00dae2aba25d1f093045d15ff894df2a2d7effd68aa9c60a5
- SSDEEP 3072:hnJXhEduoz6TeqBeTtme9KxbDgqc0vjGQCkqQthaEgMXooudQr8JkgzUBdp/VcWa:hnJycb
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext