General
-
Target
08e931e2b4a954a57c72df289fbe2e4971a912e453b71f19d1859f1a350f9fba.exe
-
Size
1.2MB
-
Sample
241121-clrd2sydqj
-
MD5
c559b0a76b256e3537598031eaf17c34
-
SHA1
3d079a42ee7110ec7389bb4b28bd572a8244bf52
-
SHA256
08e931e2b4a954a57c72df289fbe2e4971a912e453b71f19d1859f1a350f9fba
-
SHA512
4b8a8bf9ca6a6d41bc35a59beb056a578aeba82b8735ffbdde92cae3f360f36187dc6953f3e2eab410ab7798d87c4e52371bc1cc426e366c80bbc728b6fba9f2
-
SSDEEP
24576:Atb20pkaCqT5TBWgNQ7aB4h0vmxQqfgy6A:JVg5tQ7aB4GQh5
Static task
static1
Behavioral task
behavioral1
Sample
08e931e2b4a954a57c72df289fbe2e4971a912e453b71f19d1859f1a350f9fba.exe
Resource
win7-20241023-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
zqamcx.com - Port:
587 - Username:
[email protected] - Password:
Methodman991 - Email To:
[email protected]
Targets
-
-
Target
08e931e2b4a954a57c72df289fbe2e4971a912e453b71f19d1859f1a350f9fba.exe
-
Size
1.2MB
-
MD5
c559b0a76b256e3537598031eaf17c34
-
SHA1
3d079a42ee7110ec7389bb4b28bd572a8244bf52
-
SHA256
08e931e2b4a954a57c72df289fbe2e4971a912e453b71f19d1859f1a350f9fba
-
SHA512
4b8a8bf9ca6a6d41bc35a59beb056a578aeba82b8735ffbdde92cae3f360f36187dc6953f3e2eab410ab7798d87c4e52371bc1cc426e366c80bbc728b6fba9f2
-
SSDEEP
24576:Atb20pkaCqT5TBWgNQ7aB4h0vmxQqfgy6A:JVg5tQ7aB4GQh5
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-