Overview

overview

10

Static

static

SecuriteIn...90.exe

windows7-x64

10

SecuriteIn...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.MSIL.GenKryptik.GBFE.tr.20356.27690.exe

  • Size

    180KB

  • Sample

    221129-jgdqqace6t

  • MD5

    23064cd00ade903622fb0acc776d1a04

  • SHA1

    9d7fc75a33d4088fd20616b08665f5797937e075

  • SHA256

    568a7001cfd26ead850956e3943142eb9828a35e2fa9657351b0593c2f5668a6

  • SHA512

    fb7a31f9e8c450403128bb709415aac19b57a4c61615961bfdf91c6372f6f81c191b5581769253db2cb2c2282906a193ebf112ab0e291268bd7c5b97c8e1d889

  • SSDEEP

    3072:Ut3SjoPVou77jppFlynM6zoaeJhsrG6U9um95OmF+ecyIJpTrwQvlGrgTem:iSj4jp1fWD0hsCr9um95OmARJp8Q9G

Score
10/10
agentteslacollectionkeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5454718029:AAG0omn0n4bKrcwl7_mMfTry6Txhqzf6xCM/

Targets

    • Target

      SecuriteInfo.com.MSIL.GenKryptik.GBFE.tr.20356.27690.exe

    • Size

      180KB

    • MD5

      23064cd00ade903622fb0acc776d1a04

    • SHA1

      9d7fc75a33d4088fd20616b08665f5797937e075

    • SHA256

      568a7001cfd26ead850956e3943142eb9828a35e2fa9657351b0593c2f5668a6

    • SHA512

      fb7a31f9e8c450403128bb709415aac19b57a4c61615961bfdf91c6372f6f81c191b5581769253db2cb2c2282906a193ebf112ab0e291268bd7c5b97c8e1d889

    • SSDEEP

      3072:Ut3SjoPVou77jppFlynM6zoaeJhsrG6U9um95OmF+ecyIJpTrwQvlGrgTem:iSj4jp1fWD0hsCr9um95OmARJp8Q9G

    Score
    10/10
    agentteslacollectionkeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks