General
- Target ss.exe
- Size 1.1MB
- Sample240705-tmcqqatepd
- SHA256 1c9240b747d01e77bbd4cea63699992b29fc24581021c9fc2a96c75e9e60cc1f
- MD5 0f0e9f8c92dad0234f46e4429a31d28c
- SHA1 6a8165afbc72cd6bb4f2524ac144e36a1ef4c509
- SHA512 cb2062113e00b790c7c5c9a6be4edb8934e2eea583a7da45814749c5482159a8b87ba0befe999d1b33527d5f5c02078c08b17ee76fc6d50fdd8b86c15bb89970
- SSDEEP 24576:4AHnh+eWsN3skA4RV1Hom2KXMmHa54weKD5wy/8LL5:/h+ZkldoPK8Ya5beC5ZUh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ss.exe
Resource
win7-20240220-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ss.exe
Resource
win10v2004-20240704-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.pgsu.co.id
-
Port
587
-
Username
-
Password
Vecls16@Vezs
-
Email to
Targets
-
- Target ss.exe
- Size 1.1MB
- SHA256 1c9240b747d01e77bbd4cea63699992b29fc24581021c9fc2a96c75e9e60cc1f
- MD5 0f0e9f8c92dad0234f46e4429a31d28c
- SHA1 6a8165afbc72cd6bb4f2524ac144e36a1ef4c509
- SHA512 cb2062113e00b790c7c5c9a6be4edb8934e2eea583a7da45814749c5482159a8b87ba0befe999d1b33527d5f5c02078c08b17ee76fc6d50fdd8b86c15bb89970
- SSDEEP 24576:4AHnh+eWsN3skA4RV1Hom2KXMmHa54weKD5wy/8LL5:/h+ZkldoPK8Ya5beC5ZUh
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext