General

  • Target

    cf02b8c30d3ee228a749c3a9feef534c67749e3d29476a6322741e8b8a303eae

  • Size

    562KB

  • Sample

    241211-begqlaspaj

  • MD5

    4ec9fd8730a661d2eaef265a26d13cd6

  • SHA1

    7509b145754560bfcd7f2b4b0661cb5881867ee1

  • SHA256

    cf02b8c30d3ee228a749c3a9feef534c67749e3d29476a6322741e8b8a303eae

  • SHA512

    9e9c7d47dad7f80e114365966aaefb73372a9d0449be14667842c4cf3fb1281009be5702175a41bb1e2487ff25e38c7ed8719f7c692c57f4eb961c9e95cbf3ea

  • SSDEEP

    12288:tTo6pok0WiCsaMuz7FsEgVL1ayEPFT5QlEtSoTPM9HZt:typ/CsgsvNfliH7M95t

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://backup.smartape.ru
  • Port:
    21
  • Username:
    user894492
  • Password:
    w6NZOdcSkH1a

Targets

    • Target

      Ödeme onay kopyası.exe

    • Size

      1.0MB

    • MD5

      edd6d1418475fb73b5a795e055303662

    • SHA1

      3a26a410fbd8c9d3d55c14eb03e8fafe4ed2f270

    • SHA256

      debe84939f3e7a95e5cc7da17eb231f189fbb814845c11256807fed1e274172c

    • SHA512

      8c0b790ffc04318432b569fe380fe82988b9e535e936b321e4cdbc0b0cc5d68b78f83e3c57256798bce1f21e50a906ba69b09e21ca8c268b9225a56e57c004a2

    • SSDEEP

      24576:Nu6J33O0c+JY5UZ+XC0kGso6FabBAZctmWY:/u0c++OCvkGs9FabBycPY

MITRE ATT&CK Enterprise v15

Tasks