General
- Target 21042026_0436_18042026_019 UAE QUOTATION 2026.Gz
- Size 1.5MB
- Sample260421-e8byzsbx4x
- SHA256 c1d257b0176ca919be43f2197dfdc32e63629e999a7c6271220f1ec9c81569f8
- MD5 6a989b5dafe3c479b8cb599ee84431a0
- SHA1 99e7fd74f726f8789e2cd66b3a4cf7589e48356d
- SHA512 5d1b815e68e372c09877e258850082811a33922000b637dda3fd52b3edaad9b8e659d95b3cb0af8bc803d7218b4c7bb2dd9a4ad91d044ef5d8a46a1b0b5f9a8f
- SSDEEP 24576:Oj0/OCks0a5/SDkr9Ile3ExjgT9DfpSfLVzke85IIJKV7TJI1xfHzHcdsmi0X7mv:OgnBSDpl+npAfLuyIiXJI38a+XTaN
- TLSH T139653379C8ADFB2DEF1B1071454F40A6445168CEBA86CD1854EFFF7B8A6DA446CE8403
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
019 UAE QUOTATION 2026.exe
Resource
win10v2004-20260130-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
msedge_elf.dll
Resource
win10v2004-20260130-en
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
msedge_elf.dll
Resource
win11-20260130-en
0 signatures
300 seconds
Malware Config
Extracted
Credentials
-
Protocol
smtp
-
Host
cp11nl.hyperhost.ua
-
Port
587
-
Username
-
Password
jxx$dOVB=6MLCO+x
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
cp11nl.hyperhost.ua
-
Port
587
-
Username
-
Password
jxx$dOVB=6MLCO+x
-
Email to
Targets
-
- Target 019 UAE QUOTATION 2026.exe
- Size 1.5MB
- SHA256 232fa5792839dc677b0211b3694954e9660b174aa0f9bedcab772ac1e86d3843
- MD5 e31770026101eaccb1b5de7cffd52033
- SHA1 235beed3a3c2ecb6415eff789d2f4deb2cd28c3b
- SHA512 c65068629659f5e11e0580e57f10f14e685b4e7fe26e30e2447bc5c74fddaf8c233d095bb96df4b982b2695048a5e4f7c7d5bc138613fbc69db86a05dde6e9cc
- SSDEEP 24576:WdpUGxARynhYYI6dwnHL3b5qbDCLTTG/Zl1kngqi6Qj92dgysZI:Z/RynhYYlEbb5Q4TT05hxY
- TLSH T1B9758C13F29902E8D06ED2B9CB568132EA61BC060B35B6DF069073552F77BE46B3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Family: AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-
- Target msedge_elf.dll
- Size 2.6MB
- SHA256 db55b26b18647b6de09aeeecc92799f7497cf938f9450bdce4bd12c52474e066
- MD5 7fb5956d3049ea1714a9c3acecbf3ec8
- SHA1 62765ea44d495dd8b8752b81f9f58427a7e8fcca
- SHA512 25f4a78cf18c6187e0b6a7aa475171756ca0afb66118ae9388b95bc7493858f6b6e5813fc48adda187de597575aebe2e63a178053f723d5b1924533011f9c357
- SSDEEP 49152:YH4p04kVv5EetZeC5t8J7VZulop9UdIxwt+vuwCGwRjMU8OTk:YZPl+UdIxwt+vuwCGwRjMU8OTk
- TLSH T1D7C58E42F3884EE5D196C938CA07DB3BC271F85A03B466CF1A95D39E2D737A15A7A301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10