Overview

overview

10

Static

static

10

631ba21d54...25.exe

windows7-x64

1

631ba21d54...25.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    631ba21d543678ab025037ad8f53cfb354f097c6bf580019be33a3364019c525

  • Size

    300KB

  • Sample

    240523-csbbeaae68

  • MD5

    4990d5be4b737ada6ac3b70ac9579054

  • SHA1

    1790ca8f04ff2cb3ee92c6a1d29855b30343511f

  • SHA256

    631ba21d543678ab025037ad8f53cfb354f097c6bf580019be33a3364019c525

  • SHA512

    22d99a81e8ded9923101864b715eea3cd99a81a1ef19647eda18de711eb5e4add61d6fadba2a36887af6802ba75d0fd8ce26a92fa59de73d30b615e9e7469703

  • SSDEEP

    6144:vmhwqSIB8yXHtcoFa7XcM4qa3IB0H1V2xiYq42FrcsqGJlmYb:vC6IBFteXJ0/EAL2GJ

Score
10/10
agentteslamicrosoftphishing

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.flood-protection.org
  • Port:
    587
  • Username:
    emmydon@flood-protection.org
  • Password:
    emmydon2424@

Targets

    • Target

      631ba21d543678ab025037ad8f53cfb354f097c6bf580019be33a3364019c525

    • Size

      300KB

    • MD5

      4990d5be4b737ada6ac3b70ac9579054

    • SHA1

      1790ca8f04ff2cb3ee92c6a1d29855b30343511f

    • SHA256

      631ba21d543678ab025037ad8f53cfb354f097c6bf580019be33a3364019c525

    • SHA512

      22d99a81e8ded9923101864b715eea3cd99a81a1ef19647eda18de711eb5e4add61d6fadba2a36887af6802ba75d0fd8ce26a92fa59de73d30b615e9e7469703

    • SSDEEP

      6144:vmhwqSIB8yXHtcoFa7XcM4qa3IB0H1V2xiYq42FrcsqGJlmYb:vC6IBFteXJ0/EAL2GJ

    Score
    5/10
    microsoftphishing
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks