General
-
Target
294f18c24c0c96940257afbfd341e4728e9cd071da0e9519ea7bdd31f80f9fbf.rar
-
Size
876KB
-
Sample
250107-clckwsype1
-
MD5
f5d982e4b7fb78e864c37fc70697e7e4
-
SHA1
8a9d80db9f26cceb860577334b38f3f7914f2944
-
SHA256
294f18c24c0c96940257afbfd341e4728e9cd071da0e9519ea7bdd31f80f9fbf
-
SHA512
da1044941f09fffc2fab2d7cff59938b146a0b7e2a6e8d0d6d60149992ba3649e5148595707077386673695f3ecf59251f4e7009ba5e59bed7b52f8859261660
-
SSDEEP
12288:yvJ4A3ulwkgXGsYgyY0hZiLFg8s1RBnDfTeJ5HPGNj8JVSUly9Lx1CgEDWgPgH2G:yxUxRfhZi0/nOJQmnSUGXNPgAth+lPQH
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.pgsu.co.id - Port:
587 - Username:
[email protected] - Password:
Vecls16@Vezs - Email To:
[email protected]
Targets
-
-
Target
2024 tagihan.exe
-
Size
1.4MB
-
MD5
870b700a93942a80deae8eafd7fef972
-
SHA1
6daf90b72e9cf81a4b31669d03d753a7b3ab83ba
-
SHA256
d2196a161741acc9a33cab7859e04c625ee492f31dc96a17c57cacb2517f61c7
-
SHA512
64a7a9db5a18bd74eb3d5b85c865dff9be2bbebe7c2db154cdb6ae068970861f25f5f31f59fec0e11f0b92055e05f2c0b61eb7ab77158b514ac1a7b952312ba7
-
SSDEEP
24576:HqDEvCTbMWu7rQYlBQcBiT6rprG8alSN/kwfyzKKQ3P6oI3apbx9:HTvC/MTQYxsWR7alSqwfyOKQ32ap9
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-