agenttesla | 1e13aaa4b61d49d2d47fed4845d4bbcb0c8e93d51132c88137a6df47b10cf2ea | Triage

Sharing

General

Target

1e13aaa4b61d49d2d47fed4845d4bbcb0c8e93d51132c88137a6df47b10cf2ea
Size

164KB
Sample

240526-b4gf5aba43
MD5

726eb6c565f4b8cd832c26ccd99e57bd
SHA1

3402366e99184d1eef72a31d9cd91e67cb3ae4b7
SHA256

1e13aaa4b61d49d2d47fed4845d4bbcb0c8e93d51132c88137a6df47b10cf2ea
SHA512

8aa82fa60b1ada5f7c00bdbb5f8c5a162c00ae6f897fd7432d645e43fafe8c296e241fb2e37ba839021456c61a7fe66e520969488c95a439801cfc3fc5e5335f
SSDEEP

3072:4pb2xcb2M1CL4BnjYX3ylyQ6OnRF7Gr3k+xU2j:4gcbYinkXcyQ6OnR03+2

Score

10^/10

agenttesla microsoft phishing

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.eculantltd.me
Port:
587
Username:
[email protected]
Password:
best@qwerty
Email To:
[email protected]

Targets

- Target
  
  1e13aaa4b61d49d2d47fed4845d4bbcb0c8e93d51132c88137a6df47b10cf2ea
- Size
  
  164KB
- MD5
  
  726eb6c565f4b8cd832c26ccd99e57bd
- SHA1
  
  3402366e99184d1eef72a31d9cd91e67cb3ae4b7
- SHA256
  
  1e13aaa4b61d49d2d47fed4845d4bbcb0c8e93d51132c88137a6df47b10cf2ea
- SHA512
  
  8aa82fa60b1ada5f7c00bdbb5f8c5a162c00ae6f897fd7432d645e43fafe8c296e241fb2e37ba839021456c61a7fe66e520969488c95a439801cfc3fc5e5335f
- SSDEEP
  
  3072:4pb2xcb2M1CL4BnjYX3ylyQ6OnRF7Gr3k+xU2j:4gcbYinkXcyQ6OnR03+2
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing