agenttesla | 9e4027706ea871d19520759f1dc29b6f15b47f4bc8d98965af68454a22ca563e | Triage

Sharing

General

Target

9e4027706ea871d19520759f1dc29b6f15b47f4bc8d98965af68454a22ca563e
Size

234KB
Sample

240916-nd9q7svbnq
MD5

5af20a57cdfbbdd0d528045a87306891
SHA1

1e7e9b25098ebffdbee7d87c01f1c1b08a9abedd
SHA256

9e4027706ea871d19520759f1dc29b6f15b47f4bc8d98965af68454a22ca563e
SHA512

1abe00143294e64caf4c44e79932484107d9c1df0119bbbcadaa61ec594f104b04555093f101116207e622dbbc8c576ce3f20ee6d10d5850fa5d237528085458
SSDEEP

3072:benp+iGyuVYE6LbqV1tE7sEhad1GRzK5MXAa4x:benp+iGyuVYE6Lbq5Ecd+zbAv

Score

10^/10

agenttesla discovery

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.iaa-airferight.com
Port:
587
Username:
[email protected]
Password:
webmaster
Email To:
[email protected]

Targets

- Target
  
  9e4027706ea871d19520759f1dc29b6f15b47f4bc8d98965af68454a22ca563e
- Size
  
  234KB
- MD5
  
  5af20a57cdfbbdd0d528045a87306891
- SHA1
  
  1e7e9b25098ebffdbee7d87c01f1c1b08a9abedd
- SHA256
  
  9e4027706ea871d19520759f1dc29b6f15b47f4bc8d98965af68454a22ca563e
- SHA512
  
  1abe00143294e64caf4c44e79932484107d9c1df0119bbbcadaa61ec594f104b04555093f101116207e622dbbc8c576ce3f20ee6d10d5850fa5d237528085458
- SSDEEP
  
  3072:benp+iGyuVYE6LbqV1tE7sEhad1GRzK5MXAa4x:benp+iGyuVYE6Lbq5Ecd+zbAv
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2