General
- Target aBxrKHFp2mzQV84.exe
- Size 716KB
- Sample240624-halx3ssfln
- SHA256 b89f9ae90e40b950bb2c2205bcb70a42da20d12d6044dea8e4a57c099846f729
- MD5 8456d096ca2fc28621c4742c3a3621c5
- SHA1 d8162dd38862a772063e91b941f2ae3bf795cf78
- SHA512 f02724ed7143641345341b517c9b5733d3a028a041505ba5e137980e4ac363c0d2ef2e49e01c8165de385d0dd6e51146232a99d0ac24712dd3a5b4807933d22b
- SSDEEP 12288:ZI2IZsJO/ZTuUSLixq4IsMxxxVF8i7EprObn8PWIg6mXyq808v4:ZOiQ/tuUSexqXfxVqiA0YPWIg9lN
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aBxrKHFp2mzQV84.exe
Resource
win7-20231129-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
aBxrKHFp2mzQV84.exe
Resource
win10v2004-20240611-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
emidco.com
-
Port
587
-
Username
-
Password
DMmpPxx9c
-
Email to
Targets
-
- Target aBxrKHFp2mzQV84.exe
- Size 716KB
- SHA256 b89f9ae90e40b950bb2c2205bcb70a42da20d12d6044dea8e4a57c099846f729
- MD5 8456d096ca2fc28621c4742c3a3621c5
- SHA1 d8162dd38862a772063e91b941f2ae3bf795cf78
- SHA512 f02724ed7143641345341b517c9b5733d3a028a041505ba5e137980e4ac363c0d2ef2e49e01c8165de385d0dd6e51146232a99d0ac24712dd3a5b4807933d22b
- SSDEEP 12288:ZI2IZsJO/ZTuUSLixq4IsMxxxVF8i7EprObn8PWIg6mXyq808v4:ZOiQ/tuUSexqXfxVqiA0YPWIg9lN
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext