General

  • Target

    971c9af24c935f6d8b14e6cf8e85a1a4_JaffaCakes118

  • Size

    274KB

  • Sample

    240605-d557zsdb7t

  • MD5

    971c9af24c935f6d8b14e6cf8e85a1a4

  • SHA1

    47e827d0709ee7cf23dec18c695b30bb21c37b40

  • SHA256

    c75035a9d20e8c0c04f6054e270cf85588d4dc555000be1f25d3f70e6973a71f

  • SHA512

    caab8ad0f76543dd4d2e538a6a525d7588e91c053f14c1fb59537d704a280c6d90ecb62245de69daf88499e14b3091eb44076d51ad7e0b2b03f34a50d50f8199

  • SSDEEP

    6144:TJpuHrfUq/GcZ1wE2r0qOMqTkoRkmA0R1ooachYh0l4LJ0eEGEtLnOq99e7s:TJMHrfUq9OpuTkoR1AzpSu0l4LJ0eEG4

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://server.siaemic.cam/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    y$tyu,dZhyt$

Targets

    • Target

      971c9af24c935f6d8b14e6cf8e85a1a4_JaffaCakes118

    • Size

      274KB

    • MD5

      971c9af24c935f6d8b14e6cf8e85a1a4

    • SHA1

      47e827d0709ee7cf23dec18c695b30bb21c37b40

    • SHA256

      c75035a9d20e8c0c04f6054e270cf85588d4dc555000be1f25d3f70e6973a71f

    • SHA512

      caab8ad0f76543dd4d2e538a6a525d7588e91c053f14c1fb59537d704a280c6d90ecb62245de69daf88499e14b3091eb44076d51ad7e0b2b03f34a50d50f8199

    • SSDEEP

      6144:TJpuHrfUq/GcZ1wE2r0qOMqTkoRkmA0R1ooachYh0l4LJ0eEGEtLnOq99e7s:TJMHrfUq9OpuTkoR1AzpSu0l4LJ0eEG4

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

    • AgentTesla payload

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v15

Tasks