PO Contract -SCPL0882021 sales contract ZD.1.19022021_PDF.z

General
Target

PO Contract -SCPL0882021 sales contract ZD.1.19022021_PDF.z

Size

405KB

Sample

210223-5fl9e7tmf2

Score
10 /10
MD5

a8c27684b8538ee4024c12b06628d9e0

SHA1

4499a7a64ff9c8c322e64b4ab45082782f6bcc38

SHA256

6f7320da8130c56fab18bef19a5c280dbbfe2b9a78f7b746e7feb97b2838a328

SHA512

68a6b6eb336a358a8f2b584889332aea6b8e7cee2e94286e644a8b352757fbcea8ec82937a664cfa5352ca275ea46ce7aba8213dcead75e8b943cc4f4a217372

Malware Config

Extracted

Family agenttesla
Credentials

Protocol: smtp

Host: smtp.yandex.com

Port: 587

Username: fikriye@turuncoglu.com

Password: Fikriye1234

Targets
Target

PO Contract -SCPL0882021 & sales contract ZD.1.19022021_PDF.exe

MD5

1aee76519a71de3f3f4e7485c2fcc9cb

Filesize

532KB

Score
10 /10
SHA1

7a0138e465d7dd20a726f3ccebf811b059355dd4

SHA256

95d7e599e9a76497dd73084440554dfcf4a94974d49e88c43f23611d4bce5d12

SHA512

8f039b136c2c49adee9aaf92b881702a81dfba08a5ae47226d5b41c267fc475471b4d7ecf2b3c8ac06234f8a97c738ac026d2f298e275c1f759609b578a7a4b3

Tags

Signatures

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks