Overview

overview

10

Static

static

INVOICE_(F46-13 ).exe

windows7_x64

10

INVOICE_(F46-13 ).exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    INVOICE_(F46-13 ).exe

  • Size

    1.1MB

  • Sample

    201205-jlwlgmsdwe

  • MD5

    19051a2ab285284f277ec3c35bf3784f

  • SHA1

    bf0c7dac253ef3a1229103066b6be4c5f87e4939

  • SHA256

    1d35fbe1961f63fcc426c5a332d5dfc93dd051ecdfd17ea47790f80f22171ce1

  • SHA512

    3f898dd4cc2640a7fdd453cc797bdc3591975336acaeecda1053e8ad47b8cbb970ad2e52bde05f548b12c36036cc87eab5cf7571d96fc74019520cecbd9dfc0b

Score
10/10
agentteslakeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.transgear.in
  • Port:
    587
  • Username:
    purchase@transgear.in
  • Password:
    purchase@2020*

Targets

    • Target

      INVOICE_(F46-13 ).exe

    • Size

      1.1MB

    • MD5

      19051a2ab285284f277ec3c35bf3784f

    • SHA1

      bf0c7dac253ef3a1229103066b6be4c5f87e4939

    • SHA256

      1d35fbe1961f63fcc426c5a332d5dfc93dd051ecdfd17ea47790f80f22171ce1

    • SHA512

      3f898dd4cc2640a7fdd453cc797bdc3591975336acaeecda1053e8ad47b8cbb970ad2e52bde05f548b12c36036cc87eab5cf7571d96fc74019520cecbd9dfc0b

    Score
    10/10
    agentteslakeyloggerpersistencespywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Registry Run Keys / Startup Folder

1
T1060

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks