Overview

overview

10

Static

static

INQUIRY_pdf__.exe

windows7_x64

10

INQUIRY_pdf__.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    INQUIRY_pdf__.exe

  • Size

    525KB

  • Sample

    200707-3knc1fsp6x

  • MD5

    15e91b66fb88390b9833cf3a79cab0ca

  • SHA1

    e370b599b7e53bf35890e2e2f7e7b1a7e978ce86

  • SHA256

    da7f00e9042a254deafda735ffb54a8c03b4d3af45bc297d1dd412f7840cb77f

  • SHA512

    d5e5e63c7897506d80608ffff0571897b899d3964e19c51f8762412d04201a67b72a179bc11e6afb3c940a241dd42505ea9e074a947055b27aa6a4bd3704553e

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.jpmvt.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    P@ssw0rd

Extracted

Credentials

  • Protocol:     smtp
  • Host:
    mail.jpmvt.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    P@ssw0rd

Targets

    • Target

      INQUIRY_pdf__.exe

    • Size

      525KB

    • MD5

      15e91b66fb88390b9833cf3a79cab0ca

    • SHA1

      e370b599b7e53bf35890e2e2f7e7b1a7e978ce86

    • SHA256

      da7f00e9042a254deafda735ffb54a8c03b4d3af45bc297d1dd412f7840cb77f

    • SHA512

      d5e5e63c7897506d80608ffff0571897b899d3964e19c51f8762412d04201a67b72a179bc11e6afb3c940a241dd42505ea9e074a947055b27aa6a4bd3704553e

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks