agenttesla | ae030b7134568ed8dcd3d659360f98c6ef5715f1e70e22d30b6bf50fc49fdf79 | Triage

Sharing

General

Target

ae030b7134568ed8dcd3d659360f98c6ef5715f1e70e22d30b6bf50fc49fdf79
Size

166KB
Sample

240523-bzplyaha67
MD5

85322c24c94270271eb452d44976209b
SHA1

1d2ee0385a2f49ff3b927a0b19a63414b57c64f0
SHA256

ae030b7134568ed8dcd3d659360f98c6ef5715f1e70e22d30b6bf50fc49fdf79
SHA512

aecfc958a7daefe59ea4a7749e7232a2a1bb845bc8d40f1e2f86c7a80ead950d42885dc3700697bea87cb681d7f41f501ccae7d05bee219921b5ecd6b0ccf568
SSDEEP

3072:49GNZP6hr2Jv+NwD/+31G9jvWhHg8XKkO0cAf+cJK/6hg:nNZChrev+Nwj+31GNWsToK

Score

10^/10

agenttesla microsoft phishing

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1084897720285802576/j7hxHkYV5i71OmuzSOWZ2nGuZZL3prFJb9lBHhvpHosyZn0F1uL2n9r7Vn1BfRup3HMn

Targets

- Target
  
  ae030b7134568ed8dcd3d659360f98c6ef5715f1e70e22d30b6bf50fc49fdf79
- Size
  
  166KB
- MD5
  
  85322c24c94270271eb452d44976209b
- SHA1
  
  1d2ee0385a2f49ff3b927a0b19a63414b57c64f0
- SHA256
  
  ae030b7134568ed8dcd3d659360f98c6ef5715f1e70e22d30b6bf50fc49fdf79
- SHA512
  
  aecfc958a7daefe59ea4a7749e7232a2a1bb845bc8d40f1e2f86c7a80ead950d42885dc3700697bea87cb681d7f41f501ccae7d05bee219921b5ecd6b0ccf568
- SSDEEP
  
  3072:49GNZP6hr2Jv+NwD/+31G9jvWhHg8XKkO0cAf+cJK/6hg:nNZChrev+Nwj+31GNWsToK
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing