General
-
Target
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe
-
Size
1.0MB
-
Sample
240705-b5ezpasajd
-
MD5
bb389a943f133605637a7f4ef169a536
-
SHA1
2c17b46d0e2b5ee224fc1d33b056173ad9e306fb
-
SHA256
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b
-
SHA512
970ae275942716e6cd0ae744c3cb51ddc41c8cd80dace7c485be4acf88a880ec86616970dc36a17a8682008ded41d98a43cb3b61abeb2ec959fa47c9db78b6ab
-
SSDEEP
24576:vAHnh+eWsN3skA4RV1Hom2KXMmHaky7B2xrLZbTb25:Sh+ZkldoPK8YakiQ1E
Static task
static1
Behavioral task
behavioral1
Sample
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe
Resource
win10v2004-20240704-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.funworld.co.id - Port:
587 - Username:
[email protected] - Password:
fwp123mail - Email To:
[email protected]
Targets
-
-
Target
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b.exe
-
Size
1.0MB
-
MD5
bb389a943f133605637a7f4ef169a536
-
SHA1
2c17b46d0e2b5ee224fc1d33b056173ad9e306fb
-
SHA256
adc2acae5418e1a06d043121ebd3d526cf68c326be9ffa956517d6a887f63a0b
-
SHA512
970ae275942716e6cd0ae744c3cb51ddc41c8cd80dace7c485be4acf88a880ec86616970dc36a17a8682008ded41d98a43cb3b61abeb2ec959fa47c9db78b6ab
-
SSDEEP
24576:vAHnh+eWsN3skA4RV1Hom2KXMmHaky7B2xrLZbTb25:Sh+ZkldoPK8YakiQ1E
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-