General
-
Target
7733746d25014665c49f4b42070578b85866591eb7e042cd29ee710988edbe40
-
Size
561KB
-
Sample
241115-cf2mtswhqn
-
MD5
0c8989ab32b8c67fc875c5a6901d6398
-
SHA1
9fadc11a98ee3c96b163c13c053f05e16d781f2b
-
SHA256
7733746d25014665c49f4b42070578b85866591eb7e042cd29ee710988edbe40
-
SHA512
3162dce0a54a165a32b8fb18da641323d9770ddd6f40696fc19cfed06e7db87617554fed6403cbdacd25acf064c706e4c9b2660145f4e0d7a046c25716bbca57
-
SSDEEP
12288:AiG4fqHgIqA5dN5V6QbqCiYdvyma2giYGpPPL+/pHBfYnYOJm:ATAqNBb8YdvZTzPPi9BfYdm
Static task
static1
Behavioral task
behavioral1
Sample
Ürün özellikleri2.exe
Resource
win7-20240903-en
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://backup.smartape.ru - Port:
21 - Username:
user894492 - Password:
w6NZOdcSkH1a
Targets
-
-
Target
Ürün özellikleri2.exe
-
Size
1.0MB
-
MD5
59858471114fc131d3554dbc12f4cbbc
-
SHA1
768572229593872f3c591cfe5836abcbc75a6cca
-
SHA256
f252f1a56a33d636d7195d24753b844416bef3750f5db2a28f9bd016072e6ed2
-
SHA512
69b51d79413c786d1a70bd5a98e34fba7721e5f1b91137216a10b68abea2808d0a1b40356b26ac19d3c7c8c4a8014a32a8c86f93fb7ea2b461d2b2a7326d7227
-
SSDEEP
24576:Mtb20pkaCqT5TBWgNQ7aLHUBUfxVLbMz6A:1Vg5tQ7aLHe8na5
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-