General
- Target 42.exe
- Size 1.0MB
- Sample240705-tmcqqatepc
- SHA256 2eee8050f8bf737e67356837dedc9ccd415011df20ed2b14f6743ecbf265d3d1
- MD5 08b7a62938d3de352f0eb556fb046303
- SHA1 b9c814281ae2c5f0d86ea72c7370034dd992c7db
- SHA512 b365076b2d751f718bfd261fc2c3ac19c026b720858d7f064f8df5503c3ffb839385f883e7f77a84f7ef5b7a54e96dd53084c6fdcbb5270e790751ec6dc85de9
- SSDEEP 24576:GAHnh+eWsN3skA4RV1Hom2KXMmHa+7kPgeBXY5:hh+ZkldoPK8Ya+7kxBu
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
42.exe
Resource
win7-20240221-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
42.exe
Resource
win10v2004-20240704-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.funworld.co.id
-
Port
587
-
Username
-
Password
fwp123mail
-
Email to
Targets
-
- Target 42.exe
- Size 1.0MB
- SHA256 2eee8050f8bf737e67356837dedc9ccd415011df20ed2b14f6743ecbf265d3d1
- MD5 08b7a62938d3de352f0eb556fb046303
- SHA1 b9c814281ae2c5f0d86ea72c7370034dd992c7db
- SHA512 b365076b2d751f718bfd261fc2c3ac19c026b720858d7f064f8df5503c3ffb839385f883e7f77a84f7ef5b7a54e96dd53084c6fdcbb5270e790751ec6dc85de9
- SSDEEP 24576:GAHnh+eWsN3skA4RV1Hom2KXMmHa+7kPgeBXY5:hh+ZkldoPK8Ya+7kxBu
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext