General
- Target r_BBVA__consult.exe
- Size 1.1MB
- Sample241003-d9xfmsshjr
- SHA256 89bf0303ddc028f24388edc3ca7f0384b10db50dacc42cb96dac2e4d677213f0
- MD5 78cdbef04dc628a936f257373d3e3af9
- SHA1 69878d77fce7c6c224db38fe1d321ab3c2d68758
- SHA512 39a5399f7256cb44b92440419e6d60bcfe48a0f12cab227c651f503b61a04936a8a5f060a61d62209c2747210ed62f78a83ba1899fe054d2b11e76a502b261c3
- SSDEEP 24576:ffmMv6Ckr7Mny5QLtqkJUKI7/TiXabyHOJ9DS:f3v+7/5QLsE+7/Ti7uJU
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
r_BBVA__consult.exe
Resource
win7-20240708-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
srv.masternic.net
-
Port
587
-
Username
-
Password
-H{2Szxi!%qb
-
Email to
Targets
-
- Target r_BBVA__consult.exe
- Size 1.1MB
- SHA256 89bf0303ddc028f24388edc3ca7f0384b10db50dacc42cb96dac2e4d677213f0
- MD5 78cdbef04dc628a936f257373d3e3af9
- SHA1 69878d77fce7c6c224db38fe1d321ab3c2d68758
- SHA512 39a5399f7256cb44b92440419e6d60bcfe48a0f12cab227c651f503b61a04936a8a5f060a61d62209c2747210ed62f78a83ba1899fe054d2b11e76a502b261c3
- SSDEEP 24576:ffmMv6Ckr7Mny5QLtqkJUKI7/TiXabyHOJ9DS:f3v+7/5QLsE+7/Ti7uJU
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext