Overview

overview

10

Static

static

5

Purchase C...04.exe

windows7-x64

10

Purchase C...04.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2be1b8b965ae4d433648540e20ad9daf8a97db6.zip.tar.gz

  • Size

    622KB

  • Sample

    240426-nrg84sfe2y

  • MD5

    b6f25e3d4e147d6c973a777fb67f991f

  • SHA1

    fc5710ada47fcb9589f29570bebcfd5b5a831713

  • SHA256

    e6bdd02135dc0b52873b8acdf43eff136526ba2de638a794be58f46411fd2043

  • SHA512

    cb62e01a2efba8c4fee57bf51463416ee07fa9a02bfac58dc8c9e174a2177fb7599602de35ad6e841228aef6d1c7376722026638cb041cb379c85d337ace3ac1

  • SSDEEP

    12288:TGEtL4Dlup+LA/m7Bly2sfwnpttgvYHLRexJxXxLu8nG9r1SD/BZuQ:K8LSluYLAuZESpttLR4J7qBu5ZuQ

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.bezelety.top
  • Port:
    587
  • Username:
    office11@bezelety.top
  • Password:
    KV?y1$dqdUzV
  • Email To:
    office11@bezelety.top

Targets

    • Target

      Purchase Confirmation 003-23 170204/Purchase Confirmation 003-23 170204.exe

    • Size

      1.1MB

    • MD5

      baf61e5dbe33cf47ad6ddc4076a07af9

    • SHA1

      1fc141512c6a2a4715fd533d0adc1d8ce3c7842f

    • SHA256

      ea9deb59fc6309ddda6806eb4f7ce780eb54f1b0b7eca72b366bc8f110c5222a

    • SHA512

      2463f0c87870b5ddac391dcb88209cef983db246447fe1844c303d0d33c0eb1d3f70f9a7895b4fea00690862b268a36cfd69f19c18478d96c57afdf0fe11e59f

    • SSDEEP

      24576:+AHnh+eWsN3skA4RV1Hom2KXMmHa39eGsaq4QzOZIRE5:ph+ZkldoPK8Ya3QGa4Q+IY

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks