agenttesla | 17d298032fdb169534037678f8bb8d20d1b4b34df3fec8cd5b0b627ff8b41ca8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17d298032fdb169534037678f8bb8d20d1b4b34df3fec8cd5b0b627ff8b41ca8
Size

168KB
Sample

240526-ctn9nacb63
MD5

9dcc137f0527d988ce6dd8f56a2dc19f
SHA1

32ccea202a9e1689cc31eda4f5a43a49feeae93d
SHA256

17d298032fdb169534037678f8bb8d20d1b4b34df3fec8cd5b0b627ff8b41ca8
SHA512

2b672f9bd4921938b65330c9049c1205210f2d3daeb8392dbb70adbbed06bae2ac304275672ab77de87a9056ce657810f176e2f06a2dac44c3cf4f333c9495e5
SSDEEP

3072:PLGUxVJwV6LPwXX6IztBJYK3PS1UU4OQmEZR6Enok6tu:5VK6ktgLQmEmEok

Score

10^/10

agenttesla microsoft phishing

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.agentbetking.com
Port:
587
Username:
[email protected]
Password:
Temple390.
Email To:
[email protected]

Targets

- Target
  
  17d298032fdb169534037678f8bb8d20d1b4b34df3fec8cd5b0b627ff8b41ca8
- Size
  
  168KB
- MD5
  
  9dcc137f0527d988ce6dd8f56a2dc19f
- SHA1
  
  32ccea202a9e1689cc31eda4f5a43a49feeae93d
- SHA256
  
  17d298032fdb169534037678f8bb8d20d1b4b34df3fec8cd5b0b627ff8b41ca8
- SHA512
  
  2b672f9bd4921938b65330c9049c1205210f2d3daeb8392dbb70adbbed06bae2ac304275672ab77de87a9056ce657810f176e2f06a2dac44c3cf4f333c9495e5
- SSDEEP
  
  3072:PLGUxVJwV6LPwXX6IztBJYK3PS1UU4OQmEZR6Enok6tu:5VK6ktgLQmEmEok
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing