agenttesla | 1ec41f3906412fc1ac4fbb7f07d92813984003a23dadb36f25f429e511b660fc

Sharing

Copy URL

Twitter E-mail

General

Target

1ec41f3906412fc1ac4fbb7f07d92813984003a23dadb36f25f429e511b660fc
Size

52.1MB
Sample

240721-1m95jswejd
MD5

b960d8b0bfb25a1c2e63d6d395326cd5
SHA1

1783a2143409daeceb0e3a4e5f65828a1b0357a6
SHA256

1ec41f3906412fc1ac4fbb7f07d92813984003a23dadb36f25f429e511b660fc
SHA512

b36ed11b81d2dd2c1568f35084a39e434b081be6dba06185973f9bcdf08e2d7155bc3acf2496e9c681a12a2b2ca09079a3492c1d602cd51619f9982732c65a88
SSDEEP

1572864:rDXDBYlCMBsPADN5FKIHePrYFSDhSRqXJuNHtJmQm6VhpGtXkNB:rjRMePA7+PrFNSRIuZzmX6VfkXMB

Score

10^/10

agenttesla stormkitty

Malware Config

Targets

- Target
  
  FastColoredTextBox.dll
- Size
  
  333KB
- MD5
  
  b746707265772b362c0ba18d8d630061
- SHA1
  
  4b185e5f68c00bef441adb737d0955646d4e569a
- SHA256
  
  3701b19ccdac79b880b197756a972027e2ac609ebed36753bd989367ea4ef519
- SHA512
  
  fd67f6c55940509e8060da53693cb5fbac574eb1e79d5bd8f9bbd43edbd05f68d5f73994798a0eed676d3e583e1c6cde608b54c03604b3818520fa18ad19aec8
- SSDEEP
  
  6144:4FErOIif3RzSHh+20lXs1TzCeBcQeDbNlz7:eEeR52bmeh0n
Score

1^/10
behavioral1 behavioral2
- Target
  
  Fixer.bat
- Size
  
  122B
- MD5
  
  2dabc46ce85aaff29f22cd74ec074f86
- SHA1
  
  208ae3e48d67b94cc8be7bbfd9341d373fa8a730
- SHA256
  
  a11703fd47d16020fa099a95bb4e46247d32cf8821dc1826e77a971cdd3c4c55
- SHA512
  
  6a50b525bc5d8eb008b1b0d704f9942f72f1413e65751e3de83d2e16ef3cf02ef171b9da3fff0d2d92a81daac7f61b379fcf7a393f46e914435f6261965a53b3
Score

1^/10
behavioral3 behavioral4
- Target
  
  GMap.NET.Core.dll
- Size
  
  2.9MB
- MD5
  
  819352ea9e832d24fc4cebb2757a462b
- SHA1
  
  aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11
- SHA256
  
  58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86
- SHA512
  
  6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a
- SSDEEP
  
  49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh
Score

1^/10
behavioral5 behavioral6
- Target
  
  GMap.NET.WindowsForms.dll
- Size
  
  147KB
- MD5
  
  32a8742009ffdfd68b46fe8fd4794386
- SHA1
  
  de18190d77ae094b03d357abfa4a465058cd54e3
- SHA256
  
  741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365
- SHA512
  
  22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b
- SSDEEP
  
  3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ
Score

1^/10
behavioral7 behavioral8
- Target
  
  Guna.UI2.dll
- Size
  
  1.9MB
- MD5
  
  bcc0fe2b28edd2da651388f84599059b
- SHA1
  
  44d7756708aafa08730ca9dbdc01091790940a4f
- SHA256
  
  c6264665a882e73eb2262a74fea2c29b1921a9af33180126325fb67a851310ef
- SHA512
  
  3bfc3d27c095dde988f779021d0479c8c1de80a404454813c6cae663e3fe63dc636bffa7de1094e18594c9d608fa7420a0651509544722f2a00288f0b7719cc8
- SSDEEP
  
  24576:FIVZLRYIVQd9INo3FDbWX7SsOobBTEAjg+m+ZFNwaxwGoHQ/jzK+:+oWodbi9XFEAjg+m+ZFKaxw
Score

1^/10
behavioral10 behavioral9
- Target
  
  IconExtractor.dll
- Size
  
  10KB
- MD5
  
  640d8ffa779c6dd5252a262e440c66c0
- SHA1
  
  3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA256
  
  440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- SHA512
  
  e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP
  
  192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
Score

1^/10
behavioral11 behavioral12
- Target
  
  NAudio.dll
- Size
  
  502KB
- MD5
  
  3b87d1363a45ce9368e9baec32c69466
- SHA1
  
  70a9f4df01d17060ec17df9528fca7026cc42935
- SHA256
  
  81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- SHA512
  
  1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP
  
  6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
Score

1^/10
behavioral13 behavioral14
- Target
  
  Newtonsoft.Json.dll
- Size
  
  695KB
- MD5
  
  195ffb7167db3219b217c4fd439eedd6
- SHA1
  
  1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA256
  
  e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- SHA512
  
  56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP
  
  12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
Score

1^/10
behavioral15 behavioral16
- Target
  
  Plugins/ActiveWindows.dll
- Size
  
  14KB
- MD5
  
  5387af40ea982dee1bbb2f7e73567a7f
- SHA1
  
  3fca1ee729d17b7027e5f5be71d620cd1e2d38c0
- SHA256
  
  496066318072fddf12e050d7104e055fb11422411710964c5f5b840910097d47
- SHA512
  
  09494b451c31198a8e3b36ef3dacb58f0d738294d09ee1a9446357c27308a17211cad2e79d0d9010dd63d40f598e206acd0080bfe976eae35960e1682d5f7afd
- SSDEEP
  
  192:YpsFElxHxzCXorWcsvaUJwfdBuo1I5+3gqT8AO1tW9Yr6IW1GXZ3+erV7EDmSLOb:vFELRzbrUw/AodT8ptsY7XZ3rED8b
Score

1^/10
behavioral17 behavioral18
- Target
  
  Plugins/All-In-One.dll
- Size
  
  4.8MB
- MD5
  
  3b0f07340712e81b0b14af24e73c0268
- SHA1
  
  2b85188945cde10376f22e77b98b091a07f9d26f
- SHA256
  
  50d19e520d854b4bd84decd3bb352f149a1529408eb7f01ded86bde5eaec9aed
- SHA512
  
  76d91a8d8b94c986d615ac6a12314059f31da2e501bb92d582968f487612ed7080c074a181065a64799979bb3987bd1e3698fbb647dd942a827249159655d2a6
- SSDEEP
  
  98304:el19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtd:i9FPRkC8C9OH7c2ilInz0kfVo26Wsd
Score

1^/10
behavioral19 behavioral20
- Target
  
  Plugins/Chat.dll
- Size
  
  18KB
- MD5
  
  4b94fc08b95156d4b9475b215cda92b4
- SHA1
  
  3f2eda3ab4a3a21e1470aaeb28473c219921250c
- SHA256
  
  2f6207e9f6e8fa28a82e5f9e1a384fa762b1344522ec6feb15e20751c91f52e6
- SHA512
  
  cd1a58f6b4be9a1ae4c8cb3e088709d74614d9566e20c876a409e501f5af25a09520c7dff0c10116e5f7e1a6deb99ced1bed45ebcba629748e925a51805da7c6
- SSDEEP
  
  384:rUeRbCtl+SLFxdQ0C7sKmsfcrwTKvh6GIKoIEfWUWmf9:+4SpxaoKmJr0pIEfWXO
Score

1^/10
behavioral21 behavioral22
- Target
  
  Plugins/Clipboard.dll
- Size
  
  14KB
- MD5
  
  04f98015d20f7d4881b8c8c8a27d0f98
- SHA1
  
  9183169b98f73ee697df0d65c3d0d3fd8fcc03d8
- SHA256
  
  3851f8b0d7ee5cc44909ca275f19b0dc0c6fbe571de1eb95f912c71a2b3db1a0
- SHA512
  
  0ba6567f754f4ee514ce2076e935769e7b1851c823d8bec280b5b3160d07794809676d282616eadc2e622611d0ae325f1a87beba7ddcdde00a4ac88a0329d67a
- SSDEEP
  
  192:p+e2PZKYnw/LzXsJ0zzBa70OFXgNTer149iY6IW1mX/60zCCWk7RSLWMU:D2ZE3sJ0ha70USTe5Wi2X/6ojMU
Score

1^/10
behavioral23 behavioral24
- Target
  
  Plugins/Cmstp-Bypass.dll
- Size
  
  11KB
- MD5
  
  cf15259e22b58a0dfd1156ab71cbd690
- SHA1
  
  3614f4e469d28d6e65471099e2d45c8e28a7a49e
- SHA256
  
  fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b
- SHA512
  
  7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38
- SSDEEP
  
  192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ
Score

1^/10
behavioral25 behavioral26
- Target
  
  Plugins/FileManager.dll
- Size
  
  679KB
- MD5
  
  a7103c32512241abef49e11aabec554c
- SHA1
  
  b2ca76a6f3541a3a27713e5f6b7f70ec6fc7cb60
- SHA256
  
  307b0e613e8e7b61c64287790ab42f5c4e7c2d199d783e987c1a6a8eaa8c17f1
- SHA512
  
  b8e5de01df5bb25133e8a1d6fa23bc04b6a462ad77ff70f920d119041a322e368ad4a7d5d1d99de518d3ba53133ad000976e2f710159ecdffbb30021e18a0d9d
- SSDEEP
  
  12288:+8b+nFeDTzZTmRwm0G/Ot69fN0RXyPgnOIMJhnWkhr48vR:7ynF6mRwm0G/Ot6910NyPiOIMJhWk
Score

1^/10
behavioral27 behavioral28
- Target
  
  Plugins/FileSeacher.dll
- Size
  
  478KB
- MD5
  
  a1213775f91e5df436ea77795c34abb7
- SHA1
  
  c1d925587b500ea21e3f952ae5558678a5c4ba56
- SHA256
  
  d39dc7b128cf80028c6707db1c2a70b9d857b2415779d4f9c8ce6378129b671d
- SHA512
  
  377c89c44d13b3912a04fda986594001a6e3b9a9c0e0544e7d81b1f48d9b7f60b6c809a08061c8926005adaa1db2fc7a9f9c916b6e7cc438ee27657de682007c
- SSDEEP
  
  6144:x88L5lWTUVRTw/l97teGtSV41QJDsTDDh0Yhe6dwxLV/tuhgpn5XWRBI+WR:+zTUVRTw1lS4Ys50ie6Cf4gp2s
Score

1^/10
behavioral29 behavioral30
- Target
  
  Plugins/HBrowser.dll
- Size
  
  25KB
- MD5
  
  79f13be3582c42df73033819d093e1f8
- SHA1
  
  45c25633bfd0ab3c4f95b7137eb9671b911ea595
- SHA256
  
  f38e74a4bee2cf29d710d7c58eb83e548d92604621a8fb076bdc1e79714b9938
- SHA512
  
  e6e4331d26f35ac52d3524da0c6cdbb4bb36af54b57c61bce564bfec8663245bc7e5ff192c44a3c731e9ce7b83fdff40f274347a5241f6322833a92df944adb5
- SSDEEP
  
  768:GRTXKBL5/uElFr1TAeQR9bTbz+NYMoFBX:+TXKBLNuqLTORROYnFN
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32