General

  • Target

    jiz.exe

  • Size

    279KB

  • Sample

    200714-w34488fz72

  • MD5

    6ee90b652853289fcf4b52b2064c9f4d

  • SHA1

    5806f0b1182dece0695b2f176e1af51d56641966

  • SHA256

    819496d6ef872cf800b5e64428663500ed20c4d2234d501281e50883aa04bd05

  • SHA512

    60458772471eb284b7dc5ddfec561f471c3b0417a41a888927fc55d9e83d1baa9e4bf83b40f1636ff18c847eebc5307953bfe399cbb068900d834061f6aa9945

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    terminal6.veeblehosting.com
  • Port:
    587
  • Username:
    jiz@a-t-mould.com
  • Password:
    KjmOE%DvpSvC

Extracted

Credentials

  • Protocol:
    smtp
  • Host:
    terminal6.veeblehosting.com
  • Port:
    587
  • Username:
    jiz@a-t-mould.com
  • Password:
    KjmOE%DvpSvC

Targets

    • Target

      jiz.exe

    • Size

      279KB

    • MD5

      6ee90b652853289fcf4b52b2064c9f4d

    • SHA1

      5806f0b1182dece0695b2f176e1af51d56641966

    • SHA256

      819496d6ef872cf800b5e64428663500ed20c4d2234d501281e50883aa04bd05

    • SHA512

      60458772471eb284b7dc5ddfec561f471c3b0417a41a888927fc55d9e83d1baa9e4bf83b40f1636ff18c847eebc5307953bfe399cbb068900d834061f6aa9945

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.