Overview

overview

10

Static

static

70654 SSEBACT.exe

windows7_x64

10

70654 SSEBACT.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70654 SSEBACT.exe

  • Size

    389KB

  • Sample

    211019-mpgdcsfff6

  • MD5

    54ad9166b1a65288183c4ee3a5fd0750

  • SHA1

    36fad28b8c9b45a7b90c3f2fd4e5785b859e48ae

  • SHA256

    faaa464df297e2bda628f86354e76da115e88941ec92386302a6cac74fecfca0

  • SHA512

    3b9a58297ac116f94e8728a660cbb963c00722acb3c202ad23f7133eac2368bdbf665c32a1fa10b6f122dd5058113f54ed64fbfdfc1be66f7a701453aef59eba

Score
10/10
agentteslacollectionkeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.timsonlogisticske.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    timsam2015

Targets

    • Target

      70654 SSEBACT.exe

    • Size

      389KB

    • MD5

      54ad9166b1a65288183c4ee3a5fd0750

    • SHA1

      36fad28b8c9b45a7b90c3f2fd4e5785b859e48ae

    • SHA256

      faaa464df297e2bda628f86354e76da115e88941ec92386302a6cac74fecfca0

    • SHA512

      3b9a58297ac116f94e8728a660cbb963c00722acb3c202ad23f7133eac2368bdbf665c32a1fa10b6f122dd5058113f54ed64fbfdfc1be66f7a701453aef59eba

    Score
    10/10
    agentteslacollectionkeyloggerpersistencespywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks