General
-
Target
ss.exe
-
Size
1.1MB
-
Sample
240703-jgdeystamg
-
MD5
51db2f697d46b38417dc0ae45abaef28
-
SHA1
c1df22fd6c29d26e2a6765f51554e333d200df4c
-
SHA256
8e537ef5b6125fef6449de923808b92122edc8e2d6cc887d49c8ed5510760848
-
SHA512
45ec4bea2af43ba3d17029621a6c018af294d0b9135c19321a617a2dc65b1975ac3340e7fea0b5a4035f209cd9adcfd2866855b5d8eac386485039c3f6412a9d
-
SSDEEP
24576:7AHnh+eWsN3skA4RV1Hom2KXMmHa+9hu1DbLtHhj5:Wh+ZkldoPK8Ya+j6Df97
Static task
static1
Behavioral task
behavioral1
Sample
ss.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ss.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.pgsu.co.id - Port:
587 - Username:
[email protected] - Password:
Vecls16@Vezs - Email To:
[email protected]
Targets
-
-
Target
ss.exe
-
Size
1.1MB
-
MD5
51db2f697d46b38417dc0ae45abaef28
-
SHA1
c1df22fd6c29d26e2a6765f51554e333d200df4c
-
SHA256
8e537ef5b6125fef6449de923808b92122edc8e2d6cc887d49c8ed5510760848
-
SHA512
45ec4bea2af43ba3d17029621a6c018af294d0b9135c19321a617a2dc65b1975ac3340e7fea0b5a4035f209cd9adcfd2866855b5d8eac386485039c3f6412a9d
-
SSDEEP
24576:7AHnh+eWsN3skA4RV1Hom2KXMmHa+9hu1DbLtHhj5:Wh+ZkldoPK8Ya+j6Df97
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-