General
- Target z40Listadeprodu.exe
- Size 1.2MB
- Sample240701-rfjvcayhpn
- SHA256 e4fff3834d79cfac3f2b81048b42db80d1aac3c80d060ff9d2c3186f131b8775
- MD5 2fdfaca974428d2f6b1d88ee7d66409c
- SHA1 9589b5ca3bd0d75bdedc5b7e1635af3bca11d826
- SHA512 0e3fe7cbcd65ec0140ac785d43902ffb7ca91f183de5f48476188c920940052503631a3437dec00997f0b64d11613b84fef986fdb3ea92bd8c48b60ecc7b7d23
- SSDEEP 24576:LAHnh+eWsN3skA4RV1Hom2KXMmHauKSaItgxu72j5:mh+ZkldoPK8YauKS3to
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
z40Listadeprodu.exe
Resource
win7-20240508-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
z40Listadeprodu.exe
Resource
win10v2004-20240508-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
bezelety.top
-
Port
587
-
Username
-
Password
IxF(..bSed6k
-
Email to
Targets
-
- Target z40Listadeprodu.exe
- Size 1.2MB
- SHA256 e4fff3834d79cfac3f2b81048b42db80d1aac3c80d060ff9d2c3186f131b8775
- MD5 2fdfaca974428d2f6b1d88ee7d66409c
- SHA1 9589b5ca3bd0d75bdedc5b7e1635af3bca11d826
- SHA512 0e3fe7cbcd65ec0140ac785d43902ffb7ca91f183de5f48476188c920940052503631a3437dec00997f0b64d11613b84fef986fdb3ea92bd8c48b60ecc7b7d23
- SSDEEP 24576:LAHnh+eWsN3skA4RV1Hom2KXMmHauKSaItgxu72j5:mh+ZkldoPK8YauKS3to
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext