agenttesla | d986f56e4e93d43680dfd59ed3c94116e3e3c3d8dd2a4e3da486ec1e4c5334df | Triage

Sharing

General

Target

d986f56e4e93d43680dfd59ed3c94116e3e3c3d8dd2a4e3da486ec1e4c5334df
Size

236KB
Sample

240516-b4waaaef8z
MD5

ebece2dd349f822282fff1bf85e7c42a
SHA1

4396fc482f0b62cb7444c08403c9f56b4a6275b5
SHA256

d986f56e4e93d43680dfd59ed3c94116e3e3c3d8dd2a4e3da486ec1e4c5334df
SHA512

86105d6a3975276b20b31a02df5da9257d7a74de772ed5c2eca473a48f1560212e1d405cb6f10e1086434eddd71acb7113455b4318c08c0cc842315a7d6eeaad
SSDEEP

3072:hekQDZhRZJ1pczOYqkvM7MJl+I1Bt/MT+d9ueOaGq51zhQV3sl:hrQZhRZJ1zaxn+IRU+W+G8hQF

Score

10^/10

agenttesla microsoft phishing

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: ftp
Host:
ftp://ftp.sisaurora.com
Port:
21
Username:
[email protected]
Password:
a&_j{YjK*;yE

Targets

- Target
  
  d986f56e4e93d43680dfd59ed3c94116e3e3c3d8dd2a4e3da486ec1e4c5334df
- Size
  
  236KB
- MD5
  
  ebece2dd349f822282fff1bf85e7c42a
- SHA1
  
  4396fc482f0b62cb7444c08403c9f56b4a6275b5
- SHA256
  
  d986f56e4e93d43680dfd59ed3c94116e3e3c3d8dd2a4e3da486ec1e4c5334df
- SHA512
  
  86105d6a3975276b20b31a02df5da9257d7a74de772ed5c2eca473a48f1560212e1d405cb6f10e1086434eddd71acb7113455b4318c08c0cc842315a7d6eeaad
- SSDEEP
  
  3072:hekQDZhRZJ1pczOYqkvM7MJl+I1Bt/MT+d9ueOaGq51zhQV3sl:hrQZhRZJ1zaxn+IRU+W+G8hQF
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing