General
- Target 1528a9a82425dcfa406e835a3ab3c9511aeb3817be4f99702135aef34317dc3a.exe
- Size 1.1MB
- Sample240612-spg8jstdmk
- SHA256 1528a9a82425dcfa406e835a3ab3c9511aeb3817be4f99702135aef34317dc3a
- MD5 bf54f8ec6a38f57bf1cf87fad2c54813
- SHA1 fa87fe3556e0602ae519fab1f22951aaae2a91d1
- SHA512 38ec0421ab2b32639f69a17eed7da8e3beffb54c1f0f25de8f8ce8326b0fada769a3b4a7a6ce492ee97309b6cf5f6020c7bb41bf667a5df20243b80649056555
- SSDEEP 24576:uAHnh+eWsN3skA4RV1Hom2KXMmHaYhtPx3Efq5:Zh+ZkldoPK8YaYvPx3EI
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
1528a9a82425dcfa406e835a3ab3c9511aeb3817be4f99702135aef34317dc3a.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
1528a9a82425dcfa406e835a3ab3c9511aeb3817be4f99702135aef34317dc3a.exe
Resource
win10v2004-20240508-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
srv.masternic.net
-
Port
587
-
Username
-
Password
-H{2Szxi!%qb
-
Email to
Targets
-
- Target 1528a9a82425dcfa406e835a3ab3c9511aeb3817be4f99702135aef34317dc3a.exe
- Size 1.1MB
- SHA256 1528a9a82425dcfa406e835a3ab3c9511aeb3817be4f99702135aef34317dc3a
- MD5 bf54f8ec6a38f57bf1cf87fad2c54813
- SHA1 fa87fe3556e0602ae519fab1f22951aaae2a91d1
- SHA512 38ec0421ab2b32639f69a17eed7da8e3beffb54c1f0f25de8f8ce8326b0fada769a3b4a7a6ce492ee97309b6cf5f6020c7bb41bf667a5df20243b80649056555
- SSDEEP 24576:uAHnh+eWsN3skA4RV1Hom2KXMmHaYhtPx3Efq5:Zh+ZkldoPK8YaYvPx3EI
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext