agenttesla | 1ec41f3906412fc1ac4fbb7f07d92813984003a23dadb36f25f429e511b660fc

Sharing

Copy URL

Twitter E-mail

General

Target

XWorm_V5.3.zip
Size

52.1MB
Sample

240721-x6w59a1brh
MD5

b960d8b0bfb25a1c2e63d6d395326cd5
SHA1

1783a2143409daeceb0e3a4e5f65828a1b0357a6
SHA256

1ec41f3906412fc1ac4fbb7f07d92813984003a23dadb36f25f429e511b660fc
SHA512

b36ed11b81d2dd2c1568f35084a39e434b081be6dba06185973f9bcdf08e2d7155bc3acf2496e9c681a12a2b2ca09079a3492c1d602cd51619f9982732c65a88
SSDEEP

1572864:rDXDBYlCMBsPADN5FKIHePrYFSDhSRqXJuNHtJmQm6VhpGtXkNB:rjRMePA7+PrFNSRIuZzmX6VfkXMB

Score

10^/10

agenttesla stormkitty

Malware Config

Targets

- Target
  
  NAudio.dll
- Size
  
  502KB
- MD5
  
  3b87d1363a45ce9368e9baec32c69466
- SHA1
  
  70a9f4df01d17060ec17df9528fca7026cc42935
- SHA256
  
  81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- SHA512
  
  1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP
  
  6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
Score

1^/10
behavioral1 behavioral2
- Target
  
  Newtonsoft.Json.dll
- Size
  
  695KB
- MD5
  
  195ffb7167db3219b217c4fd439eedd6
- SHA1
  
  1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA256
  
  e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- SHA512
  
  56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP
  
  12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
Score

1^/10
behavioral3 behavioral4
- Target
  
  Plugins/ActiveWindows.dll
- Size
  
  14KB
- MD5
  
  5387af40ea982dee1bbb2f7e73567a7f
- SHA1
  
  3fca1ee729d17b7027e5f5be71d620cd1e2d38c0
- SHA256
  
  496066318072fddf12e050d7104e055fb11422411710964c5f5b840910097d47
- SHA512
  
  09494b451c31198a8e3b36ef3dacb58f0d738294d09ee1a9446357c27308a17211cad2e79d0d9010dd63d40f598e206acd0080bfe976eae35960e1682d5f7afd
- SSDEEP
  
  192:YpsFElxHxzCXorWcsvaUJwfdBuo1I5+3gqT8AO1tW9Yr6IW1GXZ3+erV7EDmSLOb:vFELRzbrUw/AodT8ptsY7XZ3rED8b
Score

1^/10
behavioral5 behavioral6
- Target
  
  Plugins/All-In-One.dll
- Size
  
  4.8MB
- MD5
  
  3b0f07340712e81b0b14af24e73c0268
- SHA1
  
  2b85188945cde10376f22e77b98b091a07f9d26f
- SHA256
  
  50d19e520d854b4bd84decd3bb352f149a1529408eb7f01ded86bde5eaec9aed
- SHA512
  
  76d91a8d8b94c986d615ac6a12314059f31da2e501bb92d582968f487612ed7080c074a181065a64799979bb3987bd1e3698fbb647dd942a827249159655d2a6
- SSDEEP
  
  98304:el19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtd:i9FPRkC8C9OH7c2ilInz0kfVo26Wsd
Score

1^/10
behavioral7 behavioral8
- Target
  
  Plugins/Chat.dll
- Size
  
  18KB
- MD5
  
  4b94fc08b95156d4b9475b215cda92b4
- SHA1
  
  3f2eda3ab4a3a21e1470aaeb28473c219921250c
- SHA256
  
  2f6207e9f6e8fa28a82e5f9e1a384fa762b1344522ec6feb15e20751c91f52e6
- SHA512
  
  cd1a58f6b4be9a1ae4c8cb3e088709d74614d9566e20c876a409e501f5af25a09520c7dff0c10116e5f7e1a6deb99ced1bed45ebcba629748e925a51805da7c6
- SSDEEP
  
  384:rUeRbCtl+SLFxdQ0C7sKmsfcrwTKvh6GIKoIEfWUWmf9:+4SpxaoKmJr0pIEfWXO
Score

1^/10
behavioral10 behavioral9
- Target
  
  Plugins/Clipboard.dll
- Size
  
  14KB
- MD5
  
  04f98015d20f7d4881b8c8c8a27d0f98
- SHA1
  
  9183169b98f73ee697df0d65c3d0d3fd8fcc03d8
- SHA256
  
  3851f8b0d7ee5cc44909ca275f19b0dc0c6fbe571de1eb95f912c71a2b3db1a0
- SHA512
  
  0ba6567f754f4ee514ce2076e935769e7b1851c823d8bec280b5b3160d07794809676d282616eadc2e622611d0ae325f1a87beba7ddcdde00a4ac88a0329d67a
- SSDEEP
  
  192:p+e2PZKYnw/LzXsJ0zzBa70OFXgNTer149iY6IW1mX/60zCCWk7RSLWMU:D2ZE3sJ0ha70USTe5Wi2X/6ojMU
Score

1^/10
behavioral11 behavioral12
- Target
  
  Plugins/Cmstp-Bypass.dll
- Size
  
  11KB
- MD5
  
  cf15259e22b58a0dfd1156ab71cbd690
- SHA1
  
  3614f4e469d28d6e65471099e2d45c8e28a7a49e
- SHA256
  
  fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b
- SHA512
  
  7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38
- SSDEEP
  
  192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ
Score

1^/10
behavioral13 behavioral14
- Target
  
  Plugins/FileManager.dll
- Size
  
  679KB
- MD5
  
  a7103c32512241abef49e11aabec554c
- SHA1
  
  b2ca76a6f3541a3a27713e5f6b7f70ec6fc7cb60
- SHA256
  
  307b0e613e8e7b61c64287790ab42f5c4e7c2d199d783e987c1a6a8eaa8c17f1
- SHA512
  
  b8e5de01df5bb25133e8a1d6fa23bc04b6a462ad77ff70f920d119041a322e368ad4a7d5d1d99de518d3ba53133ad000976e2f710159ecdffbb30021e18a0d9d
- SSDEEP
  
  12288:+8b+nFeDTzZTmRwm0G/Ot69fN0RXyPgnOIMJhnWkhr48vR:7ynF6mRwm0G/Ot6910NyPiOIMJhWk
Score

1^/10
behavioral15 behavioral16
- Target
  
  Plugins/FileSeacher.dll
- Size
  
  478KB
- MD5
  
  a1213775f91e5df436ea77795c34abb7
- SHA1
  
  c1d925587b500ea21e3f952ae5558678a5c4ba56
- SHA256
  
  d39dc7b128cf80028c6707db1c2a70b9d857b2415779d4f9c8ce6378129b671d
- SHA512
  
  377c89c44d13b3912a04fda986594001a6e3b9a9c0e0544e7d81b1f48d9b7f60b6c809a08061c8926005adaa1db2fc7a9f9c916b6e7cc438ee27657de682007c
- SSDEEP
  
  6144:x88L5lWTUVRTw/l97teGtSV41QJDsTDDh0Yhe6dwxLV/tuhgpn5XWRBI+WR:+zTUVRTw1lS4Ys50ie6Cf4gp2s
Score

1^/10
behavioral17 behavioral18
- Target
  
  Plugins/HBrowser.dll
- Size
  
  25KB
- MD5
  
  79f13be3582c42df73033819d093e1f8
- SHA1
  
  45c25633bfd0ab3c4f95b7137eb9671b911ea595
- SHA256
  
  f38e74a4bee2cf29d710d7c58eb83e548d92604621a8fb076bdc1e79714b9938
- SHA512
  
  e6e4331d26f35ac52d3524da0c6cdbb4bb36af54b57c61bce564bfec8663245bc7e5ff192c44a3c731e9ce7b83fdff40f274347a5241f6322833a92df944adb5
- SSDEEP
  
  768:GRTXKBL5/uElFr1TAeQR9bTbz+NYMoFBX:+TXKBLNuqLTORROYnFN
Score

1^/10
behavioral19 behavioral20
- Target
  
  Plugins/HRDP.dll
- Size
  
  1.7MB
- MD5
  
  e22910ace59c1207f6b2dd48e3a828c3
- SHA1
  
  3e00b75ae8fa1cb6e45eb45403908191a36b7e31
- SHA256
  
  41770e6bbc7f32b46237e6d2388ebf62b8f4dac40a19f024cead38f040ba139f
- SHA512
  
  dcc966489ad094d97a4689eddb13398445964e48543c832dea138f7eb1c5ec71984f12c6a789225e940f47d138fd9cd886c8e1693c30d92b054e3f7f2a401ad4
- SSDEEP
  
  24576:7dJrKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:7dkHZ5pdqYH8ia6GcKuR7
Score

1^/10
behavioral21 behavioral22
- Target
  
  Plugins/HVNC.dll
- Size
  
  59KB
- MD5
  
  00185e83cb7d4ae3be2d6c6b6a593c09
- SHA1
  
  a5ee25f87e2269968ea36447c4715545908931f9
- SHA256
  
  d747520cfbf096033d9dbdb684d84bc349555c4b33850b2e3763d22248595a84
- SHA512
  
  be9686be7c8d2ca12aec27cd14ec7c25b9f8b6be69cb70a95a1b19e5ef683e5e57b0a559bb8433df7eb0d009ec4ce77b436c12189a259e73880069fa5fa25bea
- SSDEEP
  
  768:m3VshHe3lgPOTxZz12BWR78Emepxx1JZ983O3jHRdIeYi2OPW9SQdHfiLXobeO:SqhHepTHz12BWR78E1jxzXbYuW36pO
Score

1^/10
behavioral23 behavioral24
- Target
  
  Plugins/HVNCMemory.dll
- Size
  
  40KB
- MD5
  
  c6c82e028f324ae74a06b87083c3060a
- SHA1
  
  c3f1e9db7c4df64fa0a9c6738d0808eb89909e00
- SHA256
  
  604feb4b3d6504984f1b5d26c7fe666b0203139b24142d38d6ca8592a07d165b
- SHA512
  
  58705e91e16920c236ae8c0ab1c4d5edf3824cdf8fda4d6b7d55c96b506dc9893eba2864751693304e4dcf5d1e3992958ab1db48b227c94150adb00ade753088
- SSDEEP
  
  768:IWcY/bnIUtAN6K/8cXRQGU1YKa79oQog1zq+RPz:IDQ8WAbX1U1YKYo8XL
Score

1^/10
behavioral25 behavioral26
- Target
  
  Plugins/HiddenApps.dll
- Size
  
  45KB
- MD5
  
  c5efa70a04a026b9a2fa97b1ea43e840
- SHA1
  
  aab2de0ab74c12e04256ff2b113b062dc93179e6
- SHA256
  
  f9ef7709f34e944d99ca5bef6af1524d7cf3889894084b7ae61e9202f267a728
- SHA512
  
  1348d4ebd3ac5b56eb32820ee14f9aee20a43b7dc3d06dd7fd62c8f227b12a27d0c0376c7d858e78315cd92d17e588bc2e37648c04d146530db706e8b3c4ff1d
- SSDEEP
  
  768:zy37gsdDvMZ9+rdm2KExqbMYRQpWk/x0qqBi3X/G0gpfN3ff2oA:idDvML+r/rqbMYRQpl/x5qI/dEdX2J
Score

1^/10
behavioral27 behavioral28
- Target
  
  Plugins/Informations.dll
- Size
  
  22KB
- MD5
  
  43f97998b054cb248d3ef542f3d2a35c
- SHA1
  
  5910d4bef19e86f2e2bcafac5ef05f35919b90c1
- SHA256
  
  79644e42a221cfd23fb739cfff8ac733eae42bff5193be1027776658c7b8af01
- SHA512
  
  8a9186897a94e5f5e07f65e8f7f37053e0f8d6f50dd4df1552e043ec69ebf992dc8221a3e1cfafed7a52cdfa1b4f3a00056634387859e4ee9dd9db80e7b9052a
- SSDEEP
  
  384:j4svJAz5thUNHcxxypeGQ/0n3TmyxhxJNSLSg48jjoZ:j4suz/LypeGQEjfNSlM
Score

1^/10
behavioral29 behavioral30
- Target
  
  Plugins/Keylogger.dll
- Size
  
  17KB
- MD5
  
  51f7650a8e5c4ed1b2c87632217a8cbb
- SHA1
  
  472f062b4cb066ed43fd7e04a7f4ef199f3b0faa
- SHA256
  
  cf7f8e7a469ec590e4ab1b93bed0e3dcbb57976b9fcb5ce506adc258981210a3
- SHA512
  
  6465336daa8014ef4214d92d6eb6312603b82eab8b43ce4ba3eade36424f4bae93bca30a9d5e07ec6c0a71f6f6438b8fd8a0dab9f8d721ab882df0b167141084
- SSDEEP
  
  192:PCK9HKDyS0+NKdUxEIj1aq8fgYO1Lnq4Ur1XneDN6IW1Y6Up91KTN10UbnnSL2CV:p5Oe+4dw1IDMO4U5uD8UpiH0yZCV
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32