General
-
Target
file.exe
-
Size
1.0MB
-
Sample
241213-vmsydavndx
-
MD5
ef05b0557b2c8f0c951a1b21b812e75f
-
SHA1
11aae265cc3f60806198436ac9571eee720b908e
-
SHA256
4bec652194b91669f99a72cdc4dbd2dc25138e6dcd64e62248b5f69aa3539471
-
SHA512
a2f6f831f43e277a19b49875c451f757a8b7e93c099260f8d4708b670ab81f690c9ebf68762fdf41c7f46d8f611791554b3175c0d2b7fe94c2eaa686b1060fc3
-
SSDEEP
24576:Tu6J33O0c+JY5UZ+XC0kGso6FaYLum4X1nJ6f7WY:9u0c++OCvkGs9FaYLume1nJ6SY
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240708-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.worlorderbillions.top - Port:
587 - Username:
[email protected] - Password:
3^?r?mtxk(kt - Email To:
[email protected]
Targets
-
-
Target
file.exe
-
Size
1.0MB
-
MD5
ef05b0557b2c8f0c951a1b21b812e75f
-
SHA1
11aae265cc3f60806198436ac9571eee720b908e
-
SHA256
4bec652194b91669f99a72cdc4dbd2dc25138e6dcd64e62248b5f69aa3539471
-
SHA512
a2f6f831f43e277a19b49875c451f757a8b7e93c099260f8d4708b670ab81f690c9ebf68762fdf41c7f46d8f611791554b3175c0d2b7fe94c2eaa686b1060fc3
-
SSDEEP
24576:Tu6J33O0c+JY5UZ+XC0kGso6FaYLum4X1nJ6f7WY:9u0c++OCvkGs9FaYLume1nJ6SY
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-