Overview

overview

10

Static

static

3

Tender for...DF.scr

windows7-x64

10

Tender for...DF.scr

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Tender for Quote_MYQTRA031244úPDF.scr

  • Size

    724KB

  • Sample

    240522-xdeeqsce69

  • MD5

    139aea4b0d247ae022c8da2586c6e0d0

  • SHA1

    c95ec3c016fb2d7830e6de69a37b6d2adbee03eb

  • SHA256

    6f62d88a4a3f98c4cbcc3f1a3065cd5fa6691149d2bc1354d2300491badabaa3

  • SHA512

    d03843348a39bd5ebeacf3b95b2af8be15b0e8ef9aa6a11c5a4b2f1b46c49e0ca44bf090f091a433eac8fd919a09215de4cc8cb5192d63b699503a1a98a7ecc0

  • SSDEEP

    6144:8uGrALElEJXNak6aW2GHEtkTsQbV2/njfdSknByQTdNzbFSRrL7XrpGX:5XaCGHvsw6NJX

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

Targets

    • Target

      Tender for Quote_MYQTRA031244úPDF.scr

    • Size

      724KB

    • MD5

      139aea4b0d247ae022c8da2586c6e0d0

    • SHA1

      c95ec3c016fb2d7830e6de69a37b6d2adbee03eb

    • SHA256

      6f62d88a4a3f98c4cbcc3f1a3065cd5fa6691149d2bc1354d2300491badabaa3

    • SHA512

      d03843348a39bd5ebeacf3b95b2af8be15b0e8ef9aa6a11c5a4b2f1b46c49e0ca44bf090f091a433eac8fd919a09215de4cc8cb5192d63b699503a1a98a7ecc0

    • SSDEEP

      6144:8uGrALElEJXNak6aW2GHEtkTsQbV2/njfdSknByQTdNzbFSRrL7XrpGX:5XaCGHvsw6NJX

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks