2022-09-23 Mass email campaign with a pinch of targeted spam

📃Title: Mass email campaign with a pinch of targeted spam
📅Date: 2022-09-23
🔗References:

• https://securelist.com/agent-tesla-malicious-spam-campaign/107478/

🔖Rectifyq Taxonomies:

• relevancy: 🔴 Highly Relevant
• category: ⚔Threat
• sub-category: campaign-analysis
• target: broad-based
• MY-relevancy: relevant

🔖MISP Galaxies:

• target-information=“Malaysia”
• producer= Kaspersky
• target-information=“Brazil”
• target-information=“Germany”
• target-information=“Italy”
• target-information=“Mexico”
• target-information=“Portugal”
• target-information=“Russia”
• target-information=“Spain”
• target-information=“Turkey”
• target-information=“Vietnam”
• malpedia=“Agent Tesla”
• mitre-attack-pattern=[]

MISP event uuid: c44d92e6-25fb-4c25-be68-e518d74aa44d

Indicator of Compromise (IoCs)

type,value,comment
md5, ddc607bb993b94c543c63808bebf682a, ''
md5, 862adb87b0b894d450f8914a353e3e9c, ''
md5, a1ae8b0d794af648908e0345204ea192, ''
md5, 9d0364e1f625edb286b0d5541bb15357, ''
md5, eee70de3ac0dc902b99ed33408e646c9, ''
md5, 64011a7871abb873c822b8b99082e8ab, 'Password: Info@2018'
md5, b012cb8cfee0062632817d12d43f98b4, 'Password: quality#@!'
hostname, mail.essentialapparatus.co.ke, 'On port 587'
hostname, mail.keeprojects.in, 'On port 587'
email-src, info@essentialapparatus.co.ke, ''
email-src, quality@keeprojects.in, ''

Full IOCs available in Rectifyq’s MISP