General
- Target de0107a50ccbb63541a633cf517b2d2b.exe
- Size 281KB
- Sample201109-2bcmdm7s2s
- SHA256 d4506aeac49d083167a92bd38d4776d296750d44cd86befa03532fb2befc863c
- MD5 de0107a50ccbb63541a633cf517b2d2b
- SHA1 d324b6ece5fc65d33a2b3428bc6b9a3c058e65e2
- SHA512 ecdb72aa5941d21715cee8bfe863d1abc8ce0cc6c4e11d2f9026237e9e43ea43a1a6f8b0c7f235bc0b4a18aeb6153a0bff9b4b2cd7a47e1d3c54a64aaaba18ae
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
de0107a50ccbb63541a633cf517b2d2b.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
de0107a50ccbb63541a633cf517b2d2b.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Credentials
-
Protocol
smtp
-
Host
server257.web-hosting.com
-
Port
587
-
Username
-
Password
RILoGGbVn=EY
Targets
-
- Target de0107a50ccbb63541a633cf517b2d2b.exe
- Size 281KB
- SHA256 d4506aeac49d083167a92bd38d4776d296750d44cd86befa03532fb2befc863c
- MD5 de0107a50ccbb63541a633cf517b2d2b
- SHA1 d324b6ece5fc65d33a2b3428bc6b9a3c058e65e2
- SHA512 ecdb72aa5941d21715cee8bfe863d1abc8ce0cc6c4e11d2f9026237e9e43ea43a1a6f8b0c7f235bc0b4a18aeb6153a0bff9b4b2cd7a47e1d3c54a64aaaba18ae
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.