General
- Target Export Enquiry RFQ#40089 JulyAugust Order Dubai, UAE.exe
- Size 1015KB
- Sample240718-q34mla1dll
- SHA256 9e7532d92d58245df7f8d5d41e06322a76ce934eb45b0ab95eca99a54206cb8e
- MD5 acc0bf62bdf8ec2e8531f6b82e16854c
- SHA1 0b2d5ba383129146f93b2848f17791f40dee3ae4
- SHA512 02afc8de3665ed2710d834b8fdd56337dccf34a95feade3a5075e3867bfb7a43e9b652c87d00e9588889ee6bba757673d21c788d56b71352ab3da68b0d3e0472
- SSDEEP 24576:YAHnh+eWsN3skA4RV1Hom2KXMmHaqeSLxVSAKflV5:fh+ZkldoPK8YaqfSAKfp
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Export Enquiry RFQ#40089 JulyAugust Order Dubai, UAE.exe
Resource
win7-20240708-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Export Enquiry RFQ#40089 JulyAugust Order Dubai, UAE.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.kxnlaos.com
-
Port
587
-
Username
-
Password
eDe~fz;Cy0{W
-
Email to
Targets
-
- Target Export Enquiry RFQ#40089 JulyAugust Order Dubai, UAE.exe
- Size 1015KB
- SHA256 9e7532d92d58245df7f8d5d41e06322a76ce934eb45b0ab95eca99a54206cb8e
- MD5 acc0bf62bdf8ec2e8531f6b82e16854c
- SHA1 0b2d5ba383129146f93b2848f17791f40dee3ae4
- SHA512 02afc8de3665ed2710d834b8fdd56337dccf34a95feade3a5075e3867bfb7a43e9b652c87d00e9588889ee6bba757673d21c788d56b71352ab3da68b0d3e0472
- SSDEEP 24576:YAHnh+eWsN3skA4RV1Hom2KXMmHaqeSLxVSAKflV5:fh+ZkldoPK8YaqfSAKfp
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext