General
-
Target
5.exe
-
Size
1.0MB
-
Sample
241118-spgl1syhjf
-
MD5
60c2b16e2f32c9fa9161505329c30b3f
-
SHA1
42523c5b5cd905a74fa2652a6106b4766fc6efcf
-
SHA256
bf2c22ab49aa5ca1e9fbd848beeedebead9fc49dc11ddda466c7f2423bfee031
-
SHA512
242974cfce1289b1ecb543c18aa699111ab1a2bb4ea1b9a924475d308898e2ba2c93585d1e3777d057d96ed79657dc0e128f9c0c9da5d813904cefaa9dc4124f
-
SSDEEP
24576:dtb20pkaCqT5TBWgNQ7aeoWAbbEJAjN6A:OVg5tQ7aeHHJAB5
Static task
static1
Behavioral task
behavioral1
Sample
5.exe
Resource
win7-20240903-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
bezelety.top - Port:
587 - Username:
[email protected] - Password:
IxF(..bSed6k - Email To:
[email protected]
Targets
-
-
Target
5.exe
-
Size
1.0MB
-
MD5
60c2b16e2f32c9fa9161505329c30b3f
-
SHA1
42523c5b5cd905a74fa2652a6106b4766fc6efcf
-
SHA256
bf2c22ab49aa5ca1e9fbd848beeedebead9fc49dc11ddda466c7f2423bfee031
-
SHA512
242974cfce1289b1ecb543c18aa699111ab1a2bb4ea1b9a924475d308898e2ba2c93585d1e3777d057d96ed79657dc0e128f9c0c9da5d813904cefaa9dc4124f
-
SSDEEP
24576:dtb20pkaCqT5TBWgNQ7aeoWAbbEJAjN6A:OVg5tQ7aeHHJAB5
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-