Overview

overview

10

Static

static

5

MV. LIZSTA...cr.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MV. LIZSTAR VESSEL & CARGO DESCRIPTION.pdf.scr.exe

  • Size

    1.1MB

  • Sample

    250403-emzg6a1qy7

  • MD5

    0b12e82c64b0ea2ce56e0262dd40908a

  • SHA1

    58d1eadfa1be9553f6a55e17eacd580d420aa0b4

  • SHA256

    252e4f165db308e505ede1d0780c52d97d9f893c5f2dc5b06c3f15abb71c3036

  • SHA512

    2205d6d022683ff6756a233335547942d96b300007b3a4412033dffba465c36cf7a7f8cff99927c88dedb691f747e8fe2b4e73fc56a47a11dfc415fd1677508b

  • SSDEEP

    24576:Au6J33O0c+JY5UZ+XC0kGso6FaKR65WQRhahOqregWY:qu0c++OCvkGs9FaKspTooY

Score
10/10
agenttesladiscoverykeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      MV. LIZSTAR VESSEL & CARGO DESCRIPTION.pdf.scr.exe

    • Size

      1.1MB

    • MD5

      0b12e82c64b0ea2ce56e0262dd40908a

    • SHA1

      58d1eadfa1be9553f6a55e17eacd580d420aa0b4

    • SHA256

      252e4f165db308e505ede1d0780c52d97d9f893c5f2dc5b06c3f15abb71c3036

    • SHA512

      2205d6d022683ff6756a233335547942d96b300007b3a4412033dffba465c36cf7a7f8cff99927c88dedb691f747e8fe2b4e73fc56a47a11dfc415fd1677508b

    • SSDEEP

      24576:Au6J33O0c+JY5UZ+XC0kGso6FaKR65WQRhahOqregWY:qu0c++OCvkGs9FaKspTooY

    Score
    10/10
    agenttesladiscoverykeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Agenttesla family

      agenttesla

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks