General
-
Target
04.exe
-
Size
1.1MB
-
Sample
240619-xwgyksxfmb
-
MD5
be1ecd7c5c0580b3a1803fdc32adb6a5
-
SHA1
9e8e1119d9c04d7e91fbb3ce5f610eabf656de47
-
SHA256
550bcd716d25eeb3be5bd9aa4686f89fa2d65d4a719eedaefcb289c1b823337e
-
SHA512
c46b3951eda30fd6333beca19080aefb0749b6b3ff223e455f6ed5d9796ad695bbd6c45d88be99d02da6b2ed9bfcb96cfc7b515ebd77ea876c27900c3967c54d
-
SSDEEP
24576:aAHnh+eWsN3skA4RV1Hom2KXMmHaZoO2SuWM175:th+ZkldoPK8YaZbuh3
Static task
static1
Behavioral task
behavioral1
Sample
04.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
04.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.funworld.co.id - Port:
587 - Username:
[email protected] - Password:
fwp123mail - Email To:
[email protected]
Targets
-
-
Target
04.exe
-
Size
1.1MB
-
MD5
be1ecd7c5c0580b3a1803fdc32adb6a5
-
SHA1
9e8e1119d9c04d7e91fbb3ce5f610eabf656de47
-
SHA256
550bcd716d25eeb3be5bd9aa4686f89fa2d65d4a719eedaefcb289c1b823337e
-
SHA512
c46b3951eda30fd6333beca19080aefb0749b6b3ff223e455f6ed5d9796ad695bbd6c45d88be99d02da6b2ed9bfcb96cfc7b515ebd77ea876c27900c3967c54d
-
SSDEEP
24576:aAHnh+eWsN3skA4RV1Hom2KXMmHaZoO2SuWM175:th+ZkldoPK8YaZbuh3
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-