General

  • Target

    e51d2899706d1fc7b2ceb507d49ffd09be932c79e99b0c820eaabe6b39b980c5.exe

  • Size

    949KB

  • Sample

    241217-fvctsssnhp

  • MD5

    daa9839e2d085683d0a9f98bf1a485cf

  • SHA1

    62a0fd15177c5b8123a05be32fd1427e8cf2bbb3

  • SHA256

    e51d2899706d1fc7b2ceb507d49ffd09be932c79e99b0c820eaabe6b39b980c5

  • SHA512

    b2a5e944d367711f44d8c8b2035d30950475631b5e62ad9a4e46910fe50fb23a23f18fa1ab6eee11959b9e801b7ab40a8ae148ac015f01ed0c1a1dfd029b858d

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCvqoG0Q+98vd5PG:7JZoQrbTFZY1iaCvs05KjPG

Malware Config

Targets

    • Target

      e51d2899706d1fc7b2ceb507d49ffd09be932c79e99b0c820eaabe6b39b980c5.exe

    • Size

      949KB

    • MD5

      daa9839e2d085683d0a9f98bf1a485cf

    • SHA1

      62a0fd15177c5b8123a05be32fd1427e8cf2bbb3

    • SHA256

      e51d2899706d1fc7b2ceb507d49ffd09be932c79e99b0c820eaabe6b39b980c5

    • SHA512

      b2a5e944d367711f44d8c8b2035d30950475631b5e62ad9a4e46910fe50fb23a23f18fa1ab6eee11959b9e801b7ab40a8ae148ac015f01ed0c1a1dfd029b858d

    • SSDEEP

      24576:uRmJkcoQricOIQxiZY1iaCvqoG0Q+98vd5PG:7JZoQrbTFZY1iaCvs05KjPG

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

    • Agenttesla family

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.