Overview

overview

10

Static

static

3

SecuriteIn...93.exe

windows7-x64

10

SecuriteIn...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan.Inject4.59820.21433.3593.exe

  • Size

    639KB

  • Sample

    231206-t24sraeg3x

  • MD5

    6098971efea18e9a0bb04138ebbd5ce5

  • SHA1

    3b71989c7a25e2c5aec153b4c9bde732e6064342

  • SHA256

    e1cc58feb8e61c491f7e3a5821def10c1c3447e55ea68734e2311e852670a387

  • SHA512

    ca6bd8b96011aa59ade0424fe6dd8ee53b36d53ccf92fd7ebbc2a345aaeea4f4f0abd10846afaccb7aa007730705cebfefc1247a5d24625e4b0ef564df606bf7

  • SSDEEP

    12288:fxLQaueH5qjNvCECQnrL7Yp937GHr5Z7APYmhEZIS66SiFtf4V:fxJqjNvCCrL7W37GHr9m44

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

Extracted

Credentials

  • Protocol:     smtp
  • Host:
    mail.issltd.org
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    iss123

Targets

    • Target

      SecuriteInfo.com.Trojan.Inject4.59820.21433.3593.exe

    • Size

      639KB

    • MD5

      6098971efea18e9a0bb04138ebbd5ce5

    • SHA1

      3b71989c7a25e2c5aec153b4c9bde732e6064342

    • SHA256

      e1cc58feb8e61c491f7e3a5821def10c1c3447e55ea68734e2311e852670a387

    • SHA512

      ca6bd8b96011aa59ade0424fe6dd8ee53b36d53ccf92fd7ebbc2a345aaeea4f4f0abd10846afaccb7aa007730705cebfefc1247a5d24625e4b0ef564df606bf7

    • SSDEEP

      12288:fxLQaueH5qjNvCECQnrL7Yp937GHr5Z7APYmhEZIS66SiFtf4V:fxJqjNvCCrL7W37GHr9m44

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks