Overview

overview

10

Static

static

5

TRANSFEREN...48.exe

windows7-x64

10

TRANSFEREN...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    718464c7b2955b722c7d16e12f89f87b73864ca7610048d971b74420873024d6

  • Size

    552KB

  • Sample

    241121-btceesskbm

  • MD5

    07fdbb97903480ae3d9a2dc768c887a9

  • SHA1

    b525d0aa62f77494b5fbc09665514e9bfc9b8ff8

  • SHA256

    718464c7b2955b722c7d16e12f89f87b73864ca7610048d971b74420873024d6

  • SHA512

    103f98492ec1d29c99cb1edd672cb8712656f7e2f928c2725b0b76f84297eeaad6951953259ffeeb971c31d294abeec3b34476fd8a4e9bd79b803622a038b2ac

  • SSDEEP

    12288:Mm3vyMOnev78kD7Yp5xzDXfg5MvZgJQWEt0IAnteC:5RAk7867YpjXNg1A0Iqr

Score
10/10
agenttesladiscoverykeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.elquijotebanquetes.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    -GN,s*KH{VEhPmo)+f

Targets

    • Target

      TRANSFERENCIA BANCA ELECTRONICA_09787645896485848.exe

    • Size

      1.0MB

    • MD5

      fb3e13dd3fa5bbe5fb25c33362ba4d21

    • SHA1

      cb08ceef9c354cfc2c7ab3ae997c4f34fe16b58d

    • SHA256

      9e1e113d2501bb734ed093ce55a5c2e85d0409fa757218d666d503ee449510a1

    • SHA512

      daa9c4278ea0abb36ab6e72a148fc79666ed28fee3e3f1e8c1d616df0305f0408897ba82529fe83541b7a934ecafd22d6e33dd5c1a4f6d7b0ea1be786e18f805

    • SSDEEP

      24576:5tb20pkaCqT5TBWgNQ7auQnF9AiosG5w6FCq6A:KVg5tQ7auQF9Ai9Aw6FN5

    Score
    10/10
    agenttesladiscoverykeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Agenttesla family

      agenttesla

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks