agenttesla | f89fd6034205b733d12e2575b73fb2adca509d00766bd5d844313f380b943daf | Triage

Sharing

General

Target

f89fd6034205b733d12e2575b73fb2adca509d00766bd5d844313f380b943daf
Size

164KB
Sample

240526-c2pv6ace59
MD5

bce755a12565f548ebb738e5d12158d8
SHA1

92a6e5f9d3c6939694e085b5613b5c6db07e06af
SHA256

f89fd6034205b733d12e2575b73fb2adca509d00766bd5d844313f380b943daf
SHA512

be45539b79f5a8b436acd819dfcf9f7eb3e6920254f06d3cbbec74f69dfe0987066d7f253a31632e581619532375c6d1e0a5c6cbcfbd0e0055b6b155037b01b5
SSDEEP

3072:L5Nek6NWbFbEC8T8TUsyY9pLOCOpZImW0XCPPjo1:3e1WtEC8TKU0OCO7ZyPP

Score

10^/10

agenttesla microsoft phishing

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.garagerobert.be
Port:
587
Username:
[email protected]
Password:
dibi7779
Email To:
[email protected]

Targets

- Target
  
  f89fd6034205b733d12e2575b73fb2adca509d00766bd5d844313f380b943daf
- Size
  
  164KB
- MD5
  
  bce755a12565f548ebb738e5d12158d8
- SHA1
  
  92a6e5f9d3c6939694e085b5613b5c6db07e06af
- SHA256
  
  f89fd6034205b733d12e2575b73fb2adca509d00766bd5d844313f380b943daf
- SHA512
  
  be45539b79f5a8b436acd819dfcf9f7eb3e6920254f06d3cbbec74f69dfe0987066d7f253a31632e581619532375c6d1e0a5c6cbcfbd0e0055b6b155037b01b5
- SSDEEP
  
  3072:L5Nek6NWbFbEC8T8TUsyY9pLOCOpZImW0XCPPjo1:3e1WtEC8TKU0OCO7ZyPP
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing