agenttesla | 60ef8325f2cf5bd7958588f3ad6d7114f92fc5b047c3bcad8a8727e50433082b | Triage

Sharing

General

Target

60ef8325f2cf5bd7958588f3ad6d7114f92fc5b047c3bcad8a8727e50433082b
Size

164KB
Sample

240523-bmtp5agb4w
MD5

61455cd91776afd476ffb59ada5a55b6
SHA1

15e1f95cf511366339fe2e6255de09a531a6291b
SHA256

60ef8325f2cf5bd7958588f3ad6d7114f92fc5b047c3bcad8a8727e50433082b
SHA512

68929c695322fa55198e50eaf3d37cc9e4c613e5064ca3d0d52d57ba158a339842e90cc011d36ce50a000deea2e6411a8ddf897d9b5b499add6368a9c12ae950
SSDEEP

3072:b1QwWNx36k1jwVNISLolF4csI/dkAiPRoMYVNxaX:AN0k1jwVNj8lnsn61N

Score

10^/10

agenttesla microsoft phishing

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
premium185.web-hosting.com
Port:
587
Username:
[email protected]
Password:
^d86+%5ZFFg5
Email To:
[email protected]

Targets

- Target
  
  60ef8325f2cf5bd7958588f3ad6d7114f92fc5b047c3bcad8a8727e50433082b
- Size
  
  164KB
- MD5
  
  61455cd91776afd476ffb59ada5a55b6
- SHA1
  
  15e1f95cf511366339fe2e6255de09a531a6291b
- SHA256
  
  60ef8325f2cf5bd7958588f3ad6d7114f92fc5b047c3bcad8a8727e50433082b
- SHA512
  
  68929c695322fa55198e50eaf3d37cc9e4c613e5064ca3d0d52d57ba158a339842e90cc011d36ce50a000deea2e6411a8ddf897d9b5b499add6368a9c12ae950
- SSDEEP
  
  3072:b1QwWNx36k1jwVNISLolF4csI/dkAiPRoMYVNxaX:AN0k1jwVNj8lnsn61N
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing