Overview

overview

10

Static

static

10

688-66-0x0...ry.exe

windows7-x64

688-66-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    688-66-0x0000000000A00000-0x0000000001C54000-memory.dmp

  • Size

    18.3MB

  • Sample

    241003-k2kv7syejh

  • MD5

    6298c0a50b7e1f2af2ce6cba2c9ed8de

  • SHA1

    98f8ea9c998289e9567cd7cbf58442478bf7b044

  • SHA256

    9a121ce2a9403b36cee8855bd31cee1f4ffd04fb5acd93bfd323933a18a87452

  • SHA512

    44f50bbc1d5dca4a4e49171845b4abf0fb92ef5a48a9408729a71482505f09b73e01901827aa88a1e677e816ae30605107745e83de7eae5815ec3acfc33342be

  • SSDEEP

    3072:zxya9+aG6deqAyHP3UkQGn/NALMv/+il5H0Tj51Y:FL9+aG6deqZP38aya/+i0Td1

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.rusticpensiune.ro
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    hr,d@KUwa5llI%*RNL^J]g%8I;!;_Ne#G1h~lE!*86DAAD6#iLm$x)r+e1z$p+_Q,4_(f!};B?vD!IG?NqT[zOHNr6_nww[S]V?MlcYSt_QO

Targets

    • Target

      688-66-0x0000000000A00000-0x0000000001C54000-memory.dmp

    • Size

      18.3MB

    • MD5

      6298c0a50b7e1f2af2ce6cba2c9ed8de

    • SHA1

      98f8ea9c998289e9567cd7cbf58442478bf7b044

    • SHA256

      9a121ce2a9403b36cee8855bd31cee1f4ffd04fb5acd93bfd323933a18a87452

    • SHA512

      44f50bbc1d5dca4a4e49171845b4abf0fb92ef5a48a9408729a71482505f09b73e01901827aa88a1e677e816ae30605107745e83de7eae5815ec3acfc33342be

    • SSDEEP

      3072:zxya9+aG6deqAyHP3UkQGn/NALMv/+il5H0Tj51Y:FL9+aG6deqZP38aya/+i0Td1

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks