General
- Target kki.exe
- Size 1.0MB
- Sample250228-e6rxes1scx
- SHA256 13cafe220f24b118aa4bfe7ecc489415c8b593de6552a692ba87b636d04610dc
- MD5 9da25c0299b09fee437c403ce4de65f0
- SHA1 a68420e24ad180942418c95b2e13537b7327f355
- SHA512 5b7a80162b0c1c5a0ef817f5e1a698a1c05eab8311d40121502c614a664095f1c2131c28ec743c6c5ac7b352f8d248ae8c5874b36969e36a06c84c8d1a693e31
- SSDEEP 24576:zu6J33O0c+JY5UZ+XC0kGso6Fa5hvz4QCmWY:du0c++OCvkGs9Fa5Nz4QaY
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
kki.exe
Resource
win7-20240903-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.pgsu.co.id
-
Port
587
-
Username
-
Password
Vecls16@Vezs
-
Email to
Targets
-
- Target kki.exe
- Size 1.0MB
- SHA256 13cafe220f24b118aa4bfe7ecc489415c8b593de6552a692ba87b636d04610dc
- MD5 9da25c0299b09fee437c403ce4de65f0
- SHA1 a68420e24ad180942418c95b2e13537b7327f355
- SHA512 5b7a80162b0c1c5a0ef817f5e1a698a1c05eab8311d40121502c614a664095f1c2131c28ec743c6c5ac7b352f8d248ae8c5874b36969e36a06c84c8d1a693e31
- SSDEEP 24576:zu6J33O0c+JY5UZ+XC0kGso6Fa5hvz4QCmWY:du0c++OCvkGs9Fa5Nz4QaY
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext