agenttesla | 6df086ffb01ed12afaaa3d4fc3921691602b5efde5ffd13d589cc695bc7a576f | Triage

Sharing

General

Target

6df086ffb01ed12afaaa3d4fc3921691602b5efde5ffd13d589cc695bc7a576f
Size

237KB
Sample

241116-bww7ls1kem
MD5

5b248e88c2097c9a4d98594ad6690371
SHA1

be101acb9d7ffe381dd78441e5a1f92239c420e1
SHA256

6df086ffb01ed12afaaa3d4fc3921691602b5efde5ffd13d589cc695bc7a576f
SHA512

372ea1ecbfade04859ada1e92c836693c68be22e06cc6c0a4f12c2d118f90f64914b1422ae2fba0a17ad601c355f81c647913c2130d0088d32d27435e7ed806d
SSDEEP

3072:ylh6U+2umuqXCUFQ/AQf/erH8Q/KaMvrW5ROa34P7K:ylhB+2umu/UFQIY08mMvrA73W7

Score

10^/10

agenttesla discovery

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
cp8nl.hyperhost.ua
Port:
587
Username:
[email protected]
Password:
cy+G_(979n9N
Email To:
[email protected]

Targets

- Target
  
  6df086ffb01ed12afaaa3d4fc3921691602b5efde5ffd13d589cc695bc7a576f
- Size
  
  237KB
- MD5
  
  5b248e88c2097c9a4d98594ad6690371
- SHA1
  
  be101acb9d7ffe381dd78441e5a1f92239c420e1
- SHA256
  
  6df086ffb01ed12afaaa3d4fc3921691602b5efde5ffd13d589cc695bc7a576f
- SHA512
  
  372ea1ecbfade04859ada1e92c836693c68be22e06cc6c0a4f12c2d118f90f64914b1422ae2fba0a17ad601c355f81c647913c2130d0088d32d27435e7ed806d
- SSDEEP
  
  3072:ylh6U+2umuqXCUFQ/AQf/erH8Q/KaMvrW5ROa34P7K:ylhB+2umu/UFQIY08mMvrA73W7
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2