General
-
Target
cf02b8c30d3ee228a749c3a9feef534c67749e3d29476a6322741e8b8a303eae
-
Size
562KB
-
Sample
241211-begqlaspaj
-
MD5
4ec9fd8730a661d2eaef265a26d13cd6
-
SHA1
7509b145754560bfcd7f2b4b0661cb5881867ee1
-
SHA256
cf02b8c30d3ee228a749c3a9feef534c67749e3d29476a6322741e8b8a303eae
-
SHA512
9e9c7d47dad7f80e114365966aaefb73372a9d0449be14667842c4cf3fb1281009be5702175a41bb1e2487ff25e38c7ed8719f7c692c57f4eb961c9e95cbf3ea
-
SSDEEP
12288:tTo6pok0WiCsaMuz7FsEgVL1ayEPFT5QlEtSoTPM9HZt:typ/CsgsvNfliH7M95t
Static task
static1
Behavioral task
behavioral1
Sample
Ödeme onay kopyası.exe
Resource
win7-20240903-en
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://backup.smartape.ru - Port:
21 - Username:
user894492 - Password:
w6NZOdcSkH1a
Targets
-
-
Target
Ödeme onay kopyası.exe
-
Size
1.0MB
-
MD5
edd6d1418475fb73b5a795e055303662
-
SHA1
3a26a410fbd8c9d3d55c14eb03e8fafe4ed2f270
-
SHA256
debe84939f3e7a95e5cc7da17eb231f189fbb814845c11256807fed1e274172c
-
SHA512
8c0b790ffc04318432b569fe380fe82988b9e535e936b321e4cdbc0b0cc5d68b78f83e3c57256798bce1f21e50a906ba69b09e21ca8c268b9225a56e57c004a2
-
SSDEEP
24576:Nu6J33O0c+JY5UZ+XC0kGso6FabBAZctmWY:/u0c++OCvkGs9FabBycPY
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-