General
- Target msedge_elf.dll.exe
- Size 2.6MB
- Sample250918-m7grvaeq8z
- SHA256 7b3d435d322d7303446c5ce3308704a1d4d5a5b1e70abb44a19502be6baf2c79
- MD5 c807a235099bb0ea25cf41d1ea5b4c24
- SHA1 a967f17cfef95d8b23eed9c0e1e3cbd30e33c4fc
- SHA512 75fdd4b8dc8848ab161995decf175c0cd73894c592d8e623cfbdaa07dee9a123ff9a68b8ed4ec5a7008169fad2559d4f43aeca6bdbe4706de5db72f6e1b03e4b
- SSDEEP 49152:HB40rbzE1kgEfdB/TUnLKOCzp1gPB5HnlEi4t7FJ/:LrbJfHzZ/
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.gunsaldi.com
-
Port
587
-
Username
-
Password
LNbqa8urpzZnJDlk
-
Email to
Targets
-
- Target msedge_elf.dll.exe
- Size 2.6MB
- SHA256 7b3d435d322d7303446c5ce3308704a1d4d5a5b1e70abb44a19502be6baf2c79
- MD5 c807a235099bb0ea25cf41d1ea5b4c24
- SHA1 a967f17cfef95d8b23eed9c0e1e3cbd30e33c4fc
- SHA512 75fdd4b8dc8848ab161995decf175c0cd73894c592d8e623cfbdaa07dee9a123ff9a68b8ed4ec5a7008169fad2559d4f43aeca6bdbe4706de5db72f6e1b03e4b
- SSDEEP 49152:HB40rbzE1kgEfdB/TUnLKOCzp1gPB5HnlEi4t7FJ/:LrbJfHzZ/
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext