agenttesla | 3a6d50f22e53c5ac9bf48cda2b1ef6161a0ff475c5bc4cc91596cc86e6803bce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a6d50f22e53c5ac9bf48cda2b1ef6161a0ff475c5bc4cc91596cc86e6803bce
Size

164KB
Sample

240526-bypwbaag32
MD5

de437fdedb06077f590f169927dfd3ae
SHA1

08a9337fc4e2b304ff98802c6b827297aa1aa800
SHA256

3a6d50f22e53c5ac9bf48cda2b1ef6161a0ff475c5bc4cc91596cc86e6803bce
SHA512

5961c78ab7a793f41ce5bb64730a744072bf1de39c527c6320a147070e05e4b132f607ffc5157d85b12e080fe94fe33d43d8d0787d194cda56c7f9b9d75205b9
SSDEEP

3072:M4tzIWiZr41F6JU6dhf07IUjlWYkLFHxyEwbS1b:M0eUFEh8sUDkLdxtw21

Score

10^/10

agenttesla microsoft phishing

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.quaedvlieg.net
Port:
587
Username:
[email protected]
Password:
Imustmakethemoney
Email To:
[email protected]

Targets

- Target
  
  3a6d50f22e53c5ac9bf48cda2b1ef6161a0ff475c5bc4cc91596cc86e6803bce
- Size
  
  164KB
- MD5
  
  de437fdedb06077f590f169927dfd3ae
- SHA1
  
  08a9337fc4e2b304ff98802c6b827297aa1aa800
- SHA256
  
  3a6d50f22e53c5ac9bf48cda2b1ef6161a0ff475c5bc4cc91596cc86e6803bce
- SHA512
  
  5961c78ab7a793f41ce5bb64730a744072bf1de39c527c6320a147070e05e4b132f607ffc5157d85b12e080fe94fe33d43d8d0787d194cda56c7f9b9d75205b9
- SSDEEP
  
  3072:M4tzIWiZr41F6JU6dhf07IUjlWYkLFHxyEwbS1b:M0eUFEh8sUDkLdxtw21
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing