Overview

overview

10

Static

static

3

Account St...23.exe

windows7-x64

10

Account St...23.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    063f28e3797edbae945abd6e657b5d8955affce68efa069b8ca81c41cb0e23f0

  • Size

    449KB

  • Sample

    231204-x1jyqsee6s

  • MD5

    1239e8d1ea6619dbe96906e4d1b8b3fc

  • SHA1

    dd81aad9efa3d43686de02cf7234d7e16ce57283

  • SHA256

    063f28e3797edbae945abd6e657b5d8955affce68efa069b8ca81c41cb0e23f0

  • SHA512

    3c893883fa149c9bb93a551e94a321ea03b63b6e6ae7eb392bc54d14701eee6a47a3e11481bf0fc782e53d5721ae96eede0406e9b54180f6509e301b79bbedf0

  • SSDEEP

    12288:xsPNV3zQLse/aeyuzBTfOlFPE3XDzOo76Zts9yb:G1VjnVnifOP832dsQb

Score
10/10
agentteslacollectionkeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      Account Statement 4th December 2023.exe

    • Size

      477KB

    • MD5

      38e85567ecbe691d6319179e8e42fab2

    • SHA1

      72f8f419447da72e61518a7ecdf433a4b05aa458

    • SHA256

      188b48895639573a36270e0693569d98f7a673c975478927559c3eadd6d83839

    • SHA512

      78c77591b9e381d9b3bf962693ec00f0ae94cadee813837095d4fb1e16282a93791d03a4323a52e57870632d7e09227cba1baaeee164264fb174e64a5d7c5d75

    • SSDEEP

      12288:xkNqHWr7yJzMij4kfciX/wtf7FPEvPDvmtj9yx:xUq+IIefziB8vKjQx

    Score
    10/10
    agentteslacollectionkeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks