Overview

overview

10

Static

static

5

ΕΠΙΒΕ...DF.exe

windows7-x64

10

ΕΠΙΒΕ...DF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    __________________________________________PDF_133d06dd-0f8a-424e-9883-9e0811ed44a0.lzh.zip

  • Size

    905KB

  • Sample

    250128-p9gwqsyrew

  • MD5

    06089625bb4aef08de486b93dcd6be02

  • SHA1

    9052fce6f68a09888f642cd159c8c878df1a67f3

  • SHA256

    c46b19c9018665ec56c5ede1b4c621538f76fe0094de8f1e6219b9e767593966

  • SHA512

    8455accd840a62bafa85050b7ae28502c3356a4acff4ce5db12314f7114f68d219be9e9c51e7f88b86219fabd1c563ceb247b57cd374ba39078511f4daeec989

  • SSDEEP

    12288:mnq+IksTk6u9TYZM1d1UJ5GwAWv7nbtOB6f1JBbu2nJ2O1/1/r89x8vOkM945XpG:mn0TgtYZ4iGutO4HBXJ2O1FGxbs5iAq

Score
10/10
agenttesladiscoverykeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.solucionesmexico.mx
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    dGG^ZYIxX5!B

Targets

    • Target

      ΕΠΙΒΕΒΑΙΩΣΗ ΤΗΣ ΠΑΡΑΓΓΕΛΙΑΣ__________________________________________PDF.exe

    • Size

      90.0MB

    • MD5

      d76675b304478b413c040406fb55f3ad

    • SHA1

      3d778df9f308b2afa38d94bb802ae2bf513f7b85

    • SHA256

      12fa710576f09e23ac2f63aeb196115ab2aeea2d63fe5004be38b7edb41cf913

    • SHA512

      8959dddf5eb735995a8750b689b128ed71572f537d2ae18dd763a50a1cbf7e5148cdcaef91b2df9d884d64f8e684d43e15d3736a66b0e4f10b5a5a952f1dd8da

    • SSDEEP

      24576:Wtb20pkaCqT5TBWgNQ7aUgr3VZ4kIqw/hOSwJ9WWtuc63ogIr6A:DVg5tQ7aU23VfxSIcWChe5

    Score
    10/10
    agenttesladiscoverykeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Agenttesla family

      agenttesla

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks