General
- Target aFOBBGzvsTh1zMw.exe
- Size 532KB
- Sample200721-3ms79nbfvx
- SHA256 95f2db0071adb3c99b50c41ecdecbe4c6c18e9318bea7d8cd6743aff619a9f8f
- MD5 6bb57cfb4a60bb00cd39a5690f8fc56c
- SHA1 00db1deff4e445b7d4bbdad99aabed3ca52e8023
- SHA512 a40f91f9285b03f3a472d14dad8e068abd699b593a86cb2fe8c06c96c7ea82a0c563369e0b1cf763db52f0d05a57a737549e599fbfce34e27504ce065204ca1e
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
aFOBBGzvsTh1zMw.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
aFOBBGzvsTh1zMw.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
stark123@@@
Targets
-
- Target aFOBBGzvsTh1zMw.exe
- Size 532KB
- SHA256 95f2db0071adb3c99b50c41ecdecbe4c6c18e9318bea7d8cd6743aff619a9f8f
- MD5 6bb57cfb4a60bb00cd39a5690f8fc56c
- SHA1 00db1deff4e445b7d4bbdad99aabed3ca52e8023
- SHA512 a40f91f9285b03f3a472d14dad8e068abd699b593a86cb2fe8c06c96c7ea82a0c563369e0b1cf763db52f0d05a57a737549e599fbfce34e27504ce065204ca1e
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext