General
-
Target
69c6fd63ba988aaf7cc321d0c6138051ec29bffdb9aa7cc4e6e53084cb1a2700
-
Size
710KB
-
Sample
241017-bv1hmsyaql
-
MD5
86c8f5d03f64c3120fef20b6803d32cf
-
SHA1
ec3f077392d0ebd54dc32a4c947b0f6004bc7cd9
-
SHA256
69c6fd63ba988aaf7cc321d0c6138051ec29bffdb9aa7cc4e6e53084cb1a2700
-
SHA512
debd691cff73c7a37916492fe93f9867be8ec226538fdf854edb7d4380f8eb4f99bbbd4b02b785b33d961441a2ae4fed71d01ee3ccb660a177724c5d16499b4d
-
SSDEEP
12288:km0M6i+NHe3BJJmzdbJUG2u0UWHOu0LFo2dSMJMD+wH0nV2:0M6i+NsBPm4G2NUWH/wFpXULHs2
Malware Config
Targets
-
-
Target
προτιμολόγιο.exe
-
Size
1.2MB
-
MD5
d57143c50cfb8e8aa90dbb366dd2e892
-
SHA1
fc61599ade5e76edf5b17493595f101a57882765
-
SHA256
bfd456793f2e66ad7c9513b6852d9787c2d4225cf6df9496f92de7aeb1d8c9be
-
SHA512
0e8c3ed03d606589a26637b2b288b1f3cd66dc010babdc02c72e61285b41da5f0089fc3dab065f60cdb25d9fb509c54479c06b29494e7edb6a75058a90716f36
-
SSDEEP
24576:KqDEvCTbMWu7rQYlBQcBiT6rprG8ar0tpJ+FBXRA/FULge33kQ:KTvC/MTQYxsWR7armpJ+HhAFULgeE
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-