General
- Target 642e9540fdb40b32b9400c015ab9de7f.exe
- Size 965KB
- Sample201012-japltw9s2e
- SHA256 7ed42f7ef1538a1e13b685f37ed0b2995fdd7151af2a5ae97c68112bb244ef8d
- MD5 642e9540fdb40b32b9400c015ab9de7f
- SHA1 be59e758877ff808e461807b156008cef670ebf1
- SHA512 51d3d1213a9b28ed6ec68e73e95db499626173d009eb3b1e54d0489da72a647a9b8f5129a05d10106f02e39082b60b773103a0d130b437a024e650a403dea6c7
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
642e9540fdb40b32b9400c015ab9de7f.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
642e9540fdb40b32b9400c015ab9de7f.exe
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
us2.smtp.mailhostbox.com
-
Port
587
-
Username
-
Password
OSINACHI3116
Targets
-
- Target 642e9540fdb40b32b9400c015ab9de7f.exe
- Size 965KB
- SHA256 7ed42f7ef1538a1e13b685f37ed0b2995fdd7151af2a5ae97c68112bb244ef8d
- MD5 642e9540fdb40b32b9400c015ab9de7f
- SHA1 be59e758877ff808e461807b156008cef670ebf1
- SHA512 51d3d1213a9b28ed6ec68e73e95db499626173d009eb3b1e54d0489da72a647a9b8f5129a05d10106f02e39082b60b773103a0d130b437a024e650a403dea6c7
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext