PO#55442676.exe

General
Target

PO#55442676.exe

Size

860KB

Sample

210727-4vsa8c6bj6

Score
10 /10
MD5

12461631c81fa8e11f62afdad7d24be8

SHA1

d8b6b589cc02a865af24f4ae87a2d4ea6b4ae4f6

SHA256

77d4db3d0d8be6fee0817f5d835f0c904649d78078e6c78b2d7c224026fed3b3

SHA512

86be5061fc9d8bb750d5026932866380a08994946ddad29cd30ef784be284a68ed4c0bdf600356841d88d0ce01576640b3fd62df3fc401ccba67efb2deb16ce4

Malware Config

Extracted

Family agenttesla
Credentials

Protocol: smtp

Host: smtp.vivaldi.net

Port: 587

Username: chinalee@vivaldi.net

Password: chinalee2020

Targets
Target

PO#55442676.exe

MD5

12461631c81fa8e11f62afdad7d24be8

Filesize

860KB

Score
10 /10
SHA1

d8b6b589cc02a865af24f4ae87a2d4ea6b4ae4f6

SHA256

77d4db3d0d8be6fee0817f5d835f0c904649d78078e6c78b2d7c224026fed3b3

SHA512

86be5061fc9d8bb750d5026932866380a08994946ddad29cd30ef784be284a68ed4c0bdf600356841d88d0ce01576640b3fd62df3fc401ccba67efb2deb16ce4

Tags

Signatures

  • AgentTesla

    Description

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    Tags

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Description

    Tries to access configuration files associated with programs like FileZilla.

    Tags

    TTPs

    Data from Local System Credentials in Files
  • Reads user/profile data of local email clients

    Description

    Email clients store some user data on disk where infostealers will often target it.

    Tags

    TTPs

    Data from Local System Credentials in Files
  • Reads user/profile data of web browsers

    Description

    Infostealers often target stored browser data, which can include saved credentials etc.

    Tags

    TTPs

    Data from Local System Credentials in Files

Related Tasks

MITRE ATT&CK Matrix
Command and Control
    Credential Access
    Defense Evasion
      Discovery
        Execution
          Exfiltration
            Impact
              Initial Access
                Lateral Movement
                  Persistence
                    Privilege Escalation
                      Tasks