Overview

overview

10

Static

static

campoli fa...44.exe

windows7-x64

10

campoli fa...44.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    campoli fatura no2736 no.6843 no.6744.bat

  • Size

    976KB

  • Sample

    221207-qapb7sab2w

  • MD5

    b6d4f1cbf68c87df5bcab14003cff1b1

  • SHA1

    bd9596fa6e6554a6ff2ca823abbdaebedfad44fa

  • SHA256

    57bb2cd71368b27810a445aaf9f5260d29e636c5a8d7e5e101bca25e924a1f18

  • SHA512

    5e9d1b9100e6f54195c36fc770ee19d29d29e8cc31f292cfea065cc45b0458eb8a8572c78e79fcc10d9291bfbba53aec557370354c0f8e8b778b0624d5a96580

  • SSDEEP

    24576:DBmqUZcIVBZTazkn6sey/KjfVmTEgmtD:AqUfBIw6byuWEgm

Score
10/10
agentteslacollectionkeyloggerspywarestealertrojan

Malware Config

Extracted

Credentials

  • Protocol:     smtp
  • Host:
    mail.bretoffice.com
  • Port:
    587
  • Username:
    brets@bretoffice.com
  • Password:
    Q4Nyam%+dQ^=

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.bretoffice.com
  • Port:
    587
  • Username:
    brets@bretoffice.com
  • Password:
    Q4Nyam%+dQ^=
  • Email To:
    bret@bretoffice.com

Targets

    • Target

      campoli fatura no2736 no.6843 no.6744.bat

    • Size

      976KB

    • MD5

      b6d4f1cbf68c87df5bcab14003cff1b1

    • SHA1

      bd9596fa6e6554a6ff2ca823abbdaebedfad44fa

    • SHA256

      57bb2cd71368b27810a445aaf9f5260d29e636c5a8d7e5e101bca25e924a1f18

    • SHA512

      5e9d1b9100e6f54195c36fc770ee19d29d29e8cc31f292cfea065cc45b0458eb8a8572c78e79fcc10d9291bfbba53aec557370354c0f8e8b778b0624d5a96580

    • SSDEEP

      24576:DBmqUZcIVBZTazkn6sey/KjfVmTEgmtD:AqUfBIw6byuWEgm

    Score
    10/10
    agentteslacollectionkeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks