General
- Target ss.exe
- Size 1.1MB
- Sample240625-g8xa2avcpd
- SHA256 dbda2a0e7980e112602a69e8e0b12e1435c591b8436aacc5905bdcdca12dafdb
- MD5 8ea586521adddc3b3521af2b610522a8
- SHA1 68b608806f46416d6da1f06f4922d33bbd50ddbc
- SHA512 09fc35e89e73dc3edec7ed73a5a37e1148ff890b9c63fea08d468027937689d6dda9dfab80c967b5f5c823de01b7f00ff5a352db8034c2fbbbd2b3f44f9b147a
- SSDEEP 24576:GAHnh+eWsN3skA4RV1Hom2KXMmHaYr6eHfNX35:hh+ZkldoPK8YaYrNHf3
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ss.exe
Resource
win7-20231129-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ss.exe
Resource
win10v2004-20240508-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.pgsu.co.id
-
Port
587
-
Username
-
Password
Vecls16@Vezs
-
Email to
Targets
-
- Target ss.exe
- Size 1.1MB
- SHA256 dbda2a0e7980e112602a69e8e0b12e1435c591b8436aacc5905bdcdca12dafdb
- MD5 8ea586521adddc3b3521af2b610522a8
- SHA1 68b608806f46416d6da1f06f4922d33bbd50ddbc
- SHA512 09fc35e89e73dc3edec7ed73a5a37e1148ff890b9c63fea08d468027937689d6dda9dfab80c967b5f5c823de01b7f00ff5a352db8034c2fbbbd2b3f44f9b147a
- SSDEEP 24576:GAHnh+eWsN3skA4RV1Hom2KXMmHaYr6eHfNX35:hh+ZkldoPK8YaYrNHf3
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext