General
- Target DILIGENT HOLDINGS Requirement.exe
- Size 287KB
- Sample230712-grflysca72
- SHA256 922a02ffd022784f01ade79f8737a955cd2bc5fcc358c51a1c3d325e1d29ebea
- MD5 16fd291c17ae3a56d0e9d054ed9d647f
- SHA1 6cf8ac987c21a50499094b03b653dbbe30849833
- SHA512 a874089ee0925a71bb66c35a114f48bb6d462b4984a8e4594bdbfb5b72647dacc43bb9153232de81b11724b91f848c3557a864756c855a18a2754dce368dc818
- SSDEEP 6144:/Ya6a5ONMdhKTuAyac9QzjWdw+Qd7BvqQm+P//Y0qZ77WCu:/Yk578u23z+QdYQVH/YT7an
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DILIGENT HOLDINGS Requirement.exe
Resource
win7-20230703-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
DILIGENT HOLDINGS Requirement.exe
Resource
win10v2004-20230703-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target DILIGENT HOLDINGS Requirement.exe
- Size 287KB
- SHA256 922a02ffd022784f01ade79f8737a955cd2bc5fcc358c51a1c3d325e1d29ebea
- MD5 16fd291c17ae3a56d0e9d054ed9d647f
- SHA1 6cf8ac987c21a50499094b03b653dbbe30849833
- SHA512 a874089ee0925a71bb66c35a114f48bb6d462b4984a8e4594bdbfb5b72647dacc43bb9153232de81b11724b91f848c3557a864756c855a18a2754dce368dc818
- SSDEEP 6144:/Ya6a5ONMdhKTuAyac9QzjWdw+Qd7BvqQm+P//Y0qZ77WCu:/Yk578u23z+QdYQVH/YT7an
- MD5 SHA1 SHA512 SSDEEP
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
Loads dropped DLL
Accesses Microsoft Outlook profiles
Suspicious use of SetThreadContext