18aab0e981eee9e4ef8e15d4b003b14b3a1b0bfb7233fade8ee4b6a22a5abbb9

Sharing

Copy URL Twitter E-mail

General

Target
AgentTesla.exe
Size 2.8MB
Sample260805-gdht6abj41
SHA256 18aab0e981eee9e4ef8e15d4b003b14b3a1b0bfb7233fade8ee4b6a22a5abbb9
MD5 cce284cab135d9c0a2a64a7caec09107
SHA1 e4b8f4b6cab18b9748f83e9fffd275ef5276199e
SHA512 c45d021295871447ce60250ff9cbeba2b2a16a23371530da077d6235cfe5005f10fa228071542df3621462d913ad2f58236dc0c0cb390779eef86a10bba8429f
SSDEEP 49152:4HEHIHP6z9goDKncJkYgCB7UODoQvjZMElnp0zGMPokHz5xZtYgxsdexHwNbUMb:ZdRFBmnQ7rjZMYSzGbkHzXxWeu6W
TLSH
T186D5339256B8D8F7C3B21DB1FA0C257B5598EE7929C8E517935E1B2B4E0302BFC79201
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Targets

- Target
  AgentTesla.exe
- Size 2.8MB
- SHA256 18aab0e981eee9e4ef8e15d4b003b14b3a1b0bfb7233fade8ee4b6a22a5abbb9
- MD5 cce284cab135d9c0a2a64a7caec09107
- SHA1 e4b8f4b6cab18b9748f83e9fffd275ef5276199e
- SHA512 c45d021295871447ce60250ff9cbeba2b2a16a23371530da077d6235cfe5005f10fa228071542df3621462d913ad2f58236dc0c0cb390779eef86a10bba8429f
- SSDEEP 49152:4HEHIHP6z9goDKncJkYgCB7UODoQvjZMElnp0zGMPokHz5xZtYgxsdexHwNbUMb:ZdRFBmnQ7rjZMYSzGbkHzXxWeu6W
- TLSH
  T186D5339256B8D8F7C3B21DB1FA0C257B5598EE7929C8E517935E1B2B4E0302BFC79201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1
- Target
  MaterialDesignColors.dll
- Size 292KB
- SHA256 976eea4567656d536a6344b3834f958f2b9e27401b94c643681770437d5abc68
- MD5 39367419516f5f3df9ab1f9e5d0bbcd5
- SHA1 762c9acdb09bfdf40e700645131999202abbc871
- SHA512 20ea8a64a14579ef5403eae8a6345afa0f9b12229fdb8bc869f7a8cdd4e785093b9f60f9445be738266a161d75f53a8b8e42a69b2f9b4cbf4684f5dbf5113ae9
- SSDEEP 1536:2ZJb/nKyGMbYrE4jKg4J4A+0MDR1TU7fKoVxbYCCMIRFxcE5istk0uWE1Ci4oggj:2DDrYrE6oJU907fKoVxb+Y
- TLSH
  T17454735C1250D0FEDC13537A4838319A62277A36AB954F9AEEAF31BD9C1600B9F335E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  MaterialDesignThemes.Wpf.dll
- Size 7.1MB
- SHA256 013a42b8c6ffa29e2198eed4faf6168247b6550a4c4ed5d82023a1d82a08e27e
- MD5 fbd761926164043ac71ee9b83ab37fd1
- SHA1 38d44b0f40fa31124ba139adeb6f7adc7e53ee19
- SHA512 c2a0be2d8b5b98dc19ad167aadc1e68905ad259e3b0e020cfb95a8a816964549c98a9c5bc44b8f4640147bfd8555e799216b8dba13bf0eefed9582782da552d2
- SSDEEP 98304:OXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCR2fShTf:onJ45/9iD54+V11bFv4z
- TLSH
  T1D8762E2CC901A76BE2B7C26881DE4A17F162852AF53D5F0E30C71B6932469837E85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Microsoft.Management.Infrastructure.dll
- Size 36KB
- SHA256 cbec9a910488cadbad860c850ceae521a2a346619c5a9da579e5051e270f114c
- MD5 3998804194188c25df75f505ac5c531a
- SHA1 6b15b2d779e7c46e31fcc864fc1ef326fb3d2b50
- SHA512 d7cd7457c753190fd1ae5386a62dffbe5907ace02227ef873f4c890f4a4e987914fb94ab1ec8318f48a76fc55cfe8e7de83b75cfcbec0bb8ff0e18d2d956abdc
- SSDEEP 768:droEzop6gC66+666M66666+vvvvvvvvvvvvvF66666K66n6666666666ZpkLEyXD:nNLEyXCL
- TLSH
  T1D9F2E8C24341D52ECDEB92BAF0D512E02339F34D67539B0BA718A01EA95FBAD7307A45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  SharpSteam.dll
- Size 5KB
- SHA256 74a89211b2a1bcf84796785fb93647ac6a1e5efbb2bbd14ddcee2e50c15153a4
- MD5 aa6d1a798829536972ac5ba7d01d0c77
- SHA1 8ec399faa7c428e9962f116b2baf6efca636e8c8
- SHA512 a937d3840bd6102c321ebaa06e01bda575d383aa152c1c0bfc8faa870109a7672a9957c50a6a259ecf481b47450df1814d7d152334e396780fe15760281be870
- SSDEEP 48:6O/89d6LfKuNpIoijbm2EjW6NINM/OMeZSCo1bumqMzxSu4tM/klXWRO6uFF:0uNpI7j6jWyPgysCcl8
- TLSH
  T1E8B1761563E84737EDBB0F32AD7387524674FA51AE53DFAF0445215A6C126048E31F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  System.Management.Automation.dll
- Size 352KB
- SHA256 c3a5868584a777422cebcf31d6718fd2b26d5e2314d3b5ba6d8e47aa40faba0c
- MD5 835e9ede7e7c774e7a2d56cfdf6e9b17
- SHA1 a43ed886b68c6ee913da85df9ad2064f1d81c470
- SHA512 74284fd44497beb74326d11a0f63d96aff20aa44cfa8385f6b63b7e6743403c36e2ea4fb0d991767117a97d320e04d2b21f0a4730916244af4ffdaf51e834a26
- SSDEEP 3072:d/SDqTIE+QQVVBCTmAG17iT+Lt8D/1L2iLZdrs81sDotEKjRmarzRm+5gSBZqoEJ:d/PXS6WK2iLZdgotEKj9rzRmkgSBAot
- TLSH
  T1377408253764DBAFC8AFA276F96544304637DB183922C72359182D2C59CF76BBF12382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  UWPHook.exe
- Size 831KB
- SHA256 d55baebe14b8e68afd44227d3ae7307fa07dbbdd91331b892edde93fd027ca6e
- MD5 9aa4929291eff01d727b9fb88bba080c
- SHA1 820321cd5e8fbf81db43f024e93ee190811b8906
- SHA512 b52e18c3c8f4f30479c974e4c19e00cacdb850df6e631aeed553cbfee77703e664136385ff7a6b38c90ddf18e0c29a08c51264ad7696c5d8278b8876d3b7fe1f
- SSDEEP 12288:O4IH5S68xqbLLjo9LfPw3ytl8dSkc6ZubYpE0EjcUBS4BJ:O35R8xf143yte6epEdjcUBzBJ
- TLSH
  T19105E1499194CE52CA6A03B1D79208F626372C33F13196CF6E14FE8977B7A684F23947
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  VDFParser.dll
- Size 15KB
- SHA256 503804161cd8ff82756292f6d4d24107e6c8ac4cf43df89378f7b5d3782cc2ad
- MD5 17351a51f020d8352c3d8144bf89ab40
- SHA1 80a46c4dd6be71f789183daaa6677629654ebe68
- SHA512 ab5b16f296d787a72fed58bcb00e1295a543d4fb5eff00cb82c065fe336d18a572884003e2b519f5d4880546ce592aa9d903ad096a7d78dedf5f72b76034c983
- SSDEEP 384:GEI1akrMmNix7WLptEEEEEEEEEEEEEEEEEEEDl/hJOhE75MuODENhtN:lyMvWLptEEEEEEEEEEEEEEEEEEE5JwaJ
- TLSH
  T1F8621A19E37C437EC69F0738F86615550731A6857912EFAD8FE8A0AF7D023188512BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8