General
-
Target
Product Sample Specification.exe
-
Size
1.0MB
-
Sample
250423-hw6jlszzdv
-
MD5
fd26bdf0ddb44d397c9d6992a5a72c33
-
SHA1
e429e6f4c50d48a60fe14ddf54569825802d9784
-
SHA256
ae59c9da10fb1f7fea1b8097a2f8d1425e1e3d7ce686834fc5166c46ca8c095c
-
SHA512
68db5bfcaa0d6526a2200fc8652e1d23b9cf7112a29cf17adc8b58910b719fc057724cf9e0a4d78eb24c4ddda73314afdd94e10a7b90bd8287aefbf4bbc918be
-
SSDEEP
24576:2u6J33O0c+JY5UZ+XC0kGso6FaFC4ZXaqfp78uWY:Yu0c++OCvkGs9FaFC4Zxf9cY
Static task
static1
Behavioral task
behavioral1
Sample
Product Sample Specification.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
agenttesla
https://api.telegram.org/bot7727146830:AAHPH5G1BgMzNy35r8HXC1DXB8AIv-I_4cA/
Targets
-
-
Target
Product Sample Specification.exe
-
Size
1.0MB
-
MD5
fd26bdf0ddb44d397c9d6992a5a72c33
-
SHA1
e429e6f4c50d48a60fe14ddf54569825802d9784
-
SHA256
ae59c9da10fb1f7fea1b8097a2f8d1425e1e3d7ce686834fc5166c46ca8c095c
-
SHA512
68db5bfcaa0d6526a2200fc8652e1d23b9cf7112a29cf17adc8b58910b719fc057724cf9e0a4d78eb24c4ddda73314afdd94e10a7b90bd8287aefbf4bbc918be
-
SSDEEP
24576:2u6J33O0c+JY5UZ+XC0kGso6FaFC4ZXaqfp78uWY:Yu0c++OCvkGs9FaFC4Zxf9cY
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-