General
- Target 42.exe
- Size 1.1MB
- Sample240703-jfs41stalb
- SHA256 03665ef38e9753bab4a9f071bfd6fb52426fa14dbe9d55f019b7cead8bcbacfb
- MD5 cb5a596f6ae023f22312ac155b442817
- SHA1 3bbc4dcd644056c062dc4f3e9bdb0ac93dd372ab
- SHA512 6ef7537f5173fe1f501f0a273534f6ba2f840a8e85242420e58d55962598d88d12db545baaa4d8fdc062286fcfae28b8a7aafb43b3d9bed517e8d46424bb01c6
- SSDEEP 24576:5AHnh+eWsN3skA4RV1Hom2KXMmHa9Ts7q0U/mV3Uv/35:Ah+ZkldoPK8Ya9o7ruVZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
42.exe
Resource
win7-20240611-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
42.exe
Resource
win10v2004-20240611-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.funworld.co.id
-
Port
587
-
Username
-
Password
fwp123mail
-
Email to
Targets
-
- Target 42.exe
- Size 1.1MB
- SHA256 03665ef38e9753bab4a9f071bfd6fb52426fa14dbe9d55f019b7cead8bcbacfb
- MD5 cb5a596f6ae023f22312ac155b442817
- SHA1 3bbc4dcd644056c062dc4f3e9bdb0ac93dd372ab
- SHA512 6ef7537f5173fe1f501f0a273534f6ba2f840a8e85242420e58d55962598d88d12db545baaa4d8fdc062286fcfae28b8a7aafb43b3d9bed517e8d46424bb01c6
- SSDEEP 24576:5AHnh+eWsN3skA4RV1Hom2KXMmHa9Ts7q0U/mV3Uv/35:Ah+ZkldoPK8Ya9o7ruVZ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext