Overview

overview

10

Static

static

5

New Order ...83.exe

windows7-x64

3

New Order ...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72ad818b393872a5b04294505d5f7e9db5ea0cff5888b3a44519399e4af8549f

  • Size

    559KB

  • Sample

    241217-bdqxwavrat

  • MD5

    eac42e385de126b61111ecf739e407d7

  • SHA1

    af966fccd62e315470b6630691d8fbf7bee515ba

  • SHA256

    72ad818b393872a5b04294505d5f7e9db5ea0cff5888b3a44519399e4af8549f

  • SHA512

    5aab0ae631aa927e0bb8efd4bec8addf104aab0440e1e7cdead5cbaea4c51347d6a913e380d8c78d897f99fa48739d6bd70a98ff5d170e0b5bf8d0804b21520b

  • SSDEEP

    12288:mNQANYiHoXwLlczaeRhsM5EfwYZKR4dzb8Kqw3kY9QshtX6Xg2eB:IQANY6oXcEae/sM5EftzbigLHKXdeB

Score
10/10
agenttesladiscoverykeyloggerspywarestealertrojan

Malware Config

Extracted

Credentials

  • Protocol:     smtp
  • Host:
    mail.alltoursegypt.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    OPldome23#12klein

Extracted

Family

agenttesla

Credentials

Targets

    • Target

      New Order - FE7191PO100783.exe

    • Size

      1.0MB

    • MD5

      3b0b19f4633cd670ddccedf63c8da816

    • SHA1

      1d97973a78dfec2d521f897fe5ece3b43270d0fb

    • SHA256

      f2da9d120298fd2d3ecadc1d143e138bb8d8a6d2e7190e600fe7e2bf4df598e1

    • SHA512

      b66dc9dcd2a99876ef6eac97cfd1ba9328356f9e1f48741a4390f14be0d2b82af492849a88e15f960e5ac7b59365fcd7cb69ee32900a376b997b1c6cc4d0c279

    • SSDEEP

      24576:Zu6J33O0c+JY5UZ+XC0kGso6Faoz32QPMZUHrWY:bu0c++OCvkGs9Faoz4Y

    Score
    10/10
    discoveryagentteslakeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Agenttesla family

      agenttesla

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks