ATuRNgegI7kl7Ua.exe

General
Target

ATuRNgegI7kl7Ua.exe

Size

666KB

Sample

210504-zncbkj1v5n

Score
10 /10
MD5

ec217acdf26636dd01ccba3dc7df5066

SHA1

768c321ffe79e38f92682477a2b9b0e6122721ab

SHA256

e27c7feb3112b0f8d3aa4195962fc2c430074179cbf6811874b49691c486e26f

SHA512

e317158e54d3eb664fd4a9d8b79dc29f1d8c66d4213f311b31fcc37c575bcea5b0fb6674441f464360fdf7aadf337c199abaf4193a8cd63c5d90d2c76b3314c7

Malware Config

Extracted

Family agenttesla
Credentials

Protocol: smtp

Host: mail.chefoowork.com

Port: 587

Username: victo@chefoowork.com

Password: Yi-yIzLFE-*b

Targets
Target

ATuRNgegI7kl7Ua.exe

MD5

ec217acdf26636dd01ccba3dc7df5066

Filesize

666KB

Score
10 /10
SHA1

768c321ffe79e38f92682477a2b9b0e6122721ab

SHA256

e27c7feb3112b0f8d3aa4195962fc2c430074179cbf6811874b49691c486e26f

SHA512

e317158e54d3eb664fd4a9d8b79dc29f1d8c66d4213f311b31fcc37c575bcea5b0fb6674441f464360fdf7aadf337c199abaf4193a8cd63c5d90d2c76b3314c7

Tags

Signatures

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks