Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://cdn.discorda...

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://cdn.discordapp.com/attachments/1168956975988613260/1183159671813578863/xd.rar?ex=6587524f&is=6574dd4f&hm=d27e4f8d56f9e2a168defbaca8cf715f2a87ccf7a556bd9579e5cc2e7d8851da&

  • Sample

    231209-1fby6saehj

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1168956975988613260/1183159671813578863/xd.rar?ex=6587524f&is=6574dd4f&hm=d27e4f8d56f9e2a168defbaca8cf715f2a87ccf7a556bd9579e5cc2e7d8851da&

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • AgentTesla payload

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks