agenttesla | 68734e76fb815354cc0f198c4bc4ae635a1a23224941d94083c41b0873e002ff | Triage

Sharing

General

Target

68734e76fb815354cc0f198c4bc4ae635a1a23224941d94083c41b0873e002ff
Size

164KB
Sample

240523-by2vwagg4y
MD5

398b7493801cf7e2b74eb698a8bf36b9
SHA1

0edbaa2353154dd30ce20bc80b2cbdefb60229e8
SHA256

68734e76fb815354cc0f198c4bc4ae635a1a23224941d94083c41b0873e002ff
SHA512

2ec1b688ce26ae2c900755b97ea9df49c862fc8a7c5e647a4554ffee5c4f8869b9edda9668ad78fb2b841e8365a5f2f1e7ff8b4cef3b345e1b51d3ef2d36e78c
SSDEEP

3072:VLZNzp2wxS98mggVKWZ0iSa9XPh6l0h2VvJ/4lyi0BKLv8PJAL:/Jp2wxkRggVKWZ0/aNJ67VRwlyiSzP

Score

10^/10

agenttesla microsoft phishing

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
logxtai.shop
Port:
587
Username:
[email protected]
Password:
P2I7QjES_T6o
Email To:
[email protected]

Targets

- Target
  
  68734e76fb815354cc0f198c4bc4ae635a1a23224941d94083c41b0873e002ff
- Size
  
  164KB
- MD5
  
  398b7493801cf7e2b74eb698a8bf36b9
- SHA1
  
  0edbaa2353154dd30ce20bc80b2cbdefb60229e8
- SHA256
  
  68734e76fb815354cc0f198c4bc4ae635a1a23224941d94083c41b0873e002ff
- SHA512
  
  2ec1b688ce26ae2c900755b97ea9df49c862fc8a7c5e647a4554ffee5c4f8869b9edda9668ad78fb2b841e8365a5f2f1e7ff8b4cef3b345e1b51d3ef2d36e78c
- SSDEEP
  
  3072:VLZNzp2wxS98mggVKWZ0iSa9XPh6l0h2VvJ/4lyi0BKLv8PJAL:/Jp2wxkRggVKWZ0/aNJ67VRwlyiSzP
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing