General
- Target P0A2249.exe
- Size 1.8MB
- Sample210607-32142phzes
- SHA256 ad85d8f9cafa414d61158057243958855cd0c2cc4ee3dc2911f3e9e958d8edd7
- MD5 134df31929a71dcd9a719f0d08787c03
- SHA1 2e561098231c3f3da022415e3a02f56f0cca65e3
- SHA512 c88734be71695aec28cb23550a6fbcef56ef95f4f9ad83b6e5bcc0c020b80650565e346829c8e307cf7721700e26986a0b4d13455ab82041ae20b62a02d537a3
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
P0A2249.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
P0A2249.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.hassani777.xyz
-
Port
587
-
Username
-
Password
W@yKjYm0
Targets
-
- Target P0A2249.exe
- Size 1.8MB
- SHA256 ad85d8f9cafa414d61158057243958855cd0c2cc4ee3dc2911f3e9e958d8edd7
- MD5 134df31929a71dcd9a719f0d08787c03
- SHA1 2e561098231c3f3da022415e3a02f56f0cca65e3
- SHA512 c88734be71695aec28cb23550a6fbcef56ef95f4f9ad83b6e5bcc0c020b80650565e346829c8e307cf7721700e26986a0b4d13455ab82041ae20b62a02d537a3
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext