General
-
Target
ptss1.exe
-
Size
1.1MB
-
Sample
240619-x2sl9sxgrc
-
MD5
841b85fc2809275411240de4c4abe940
-
SHA1
36761a497068a5f7a85bf503e59916889afb5c2c
-
SHA256
e33dfce152f0b1a0fd298f630bb284cc064c2d10d2c69f3e84b308895e1f69de
-
SHA512
1730c7d375d424259f85b59938757459d8752630105dbe69c921675c7135a43ebd931244bcd752f17c1647621c0d9ae5887379392644d871e390a69993ce85f4
-
SSDEEP
24576:aAHnh+eWsN3skA4RV1Hom2KXMmHanGcGAwHBvcky5:th+ZkldoPK8YanexmN
Static task
static1
Behavioral task
behavioral1
Sample
ptss1.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ptss1.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.pgsu.co.id - Port:
587 - Username:
[email protected] - Password:
Vecls16@Vezs - Email To:
[email protected]
Targets
-
-
Target
ptss1.exe
-
Size
1.1MB
-
MD5
841b85fc2809275411240de4c4abe940
-
SHA1
36761a497068a5f7a85bf503e59916889afb5c2c
-
SHA256
e33dfce152f0b1a0fd298f630bb284cc064c2d10d2c69f3e84b308895e1f69de
-
SHA512
1730c7d375d424259f85b59938757459d8752630105dbe69c921675c7135a43ebd931244bcd752f17c1647621c0d9ae5887379392644d871e390a69993ce85f4
-
SSDEEP
24576:aAHnh+eWsN3skA4RV1Hom2KXMmHanGcGAwHBvcky5:th+ZkldoPK8YanexmN
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-