General
-
Target
Quote Reference.exe
-
Size
537KB
-
Sample
200731-rm1nxlsdmj
-
MD5
49bb7f296f0a614f5dfce69519568a0c
-
SHA1
9aaa30e5a43187c74906c9b19bb02447f894e366
-
SHA256
b35ad0fe6a5d3df3158c26cda0089cded4b956857ea965877fe553bf7e2ac3b8
-
SHA512
a95dbeca11673ce19327bbce054c2957a9663c9b59010e2f70342db9770644b679c3c3d37b058d261c29491a3300d5dc26634196e104a766e5c5a99c286db9ac
Static task
static1
Behavioral task
behavioral1
Sample
Quote Reference.exe
Resource
win7
Behavioral task
behavioral2
Sample
Quote Reference.exe
Resource
win10
Malware Config
Targets
-
-
Target
Quote Reference.exe
-
Size
537KB
-
MD5
49bb7f296f0a614f5dfce69519568a0c
-
SHA1
9aaa30e5a43187c74906c9b19bb02447f894e366
-
SHA256
b35ad0fe6a5d3df3158c26cda0089cded4b956857ea965877fe553bf7e2ac3b8
-
SHA512
a95dbeca11673ce19327bbce054c2957a9663c9b59010e2f70342db9770644b679c3c3d37b058d261c29491a3300d5dc26634196e104a766e5c5a99c286db9ac
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-