Overview

overview

10

Static

static

RFQ #6553928_PDF.exe

windows7_x64

10

RFQ #6553928_PDF.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RFQ #6553928_PDF.exe

  • Size

    1003KB

  • Sample

    210122-7wqdeedah6

  • MD5

    126a06711f90b3bb00d5cdf657bbd381

  • SHA1

    50c06ee54498c3a960baf9aca1f62909edf1981c

  • SHA256

    20795651735a3b9de9a7cd1ec01ea78c8acd43c9cb67dda8628cf1559bdcba1c

  • SHA512

    ccf017de3b41b4b7372651aeaf73f0ca25fdf7ab6075634d5cd1600801a3fe438ce3c86ceccb5de7a31f626286dd75ef02dbc9ec3f0019541eb980a76d8191fc

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1513271204:AAFn4hPg2fp2zgo9ieA28FrdaCkpwxApdbA/sendDocument

Targets

    • Target

      RFQ #6553928_PDF.exe

    • Size

      1003KB

    • MD5

      126a06711f90b3bb00d5cdf657bbd381

    • SHA1

      50c06ee54498c3a960baf9aca1f62909edf1981c

    • SHA256

      20795651735a3b9de9a7cd1ec01ea78c8acd43c9cb67dda8628cf1559bdcba1c

    • SHA512

      ccf017de3b41b4b7372651aeaf73f0ca25fdf7ab6075634d5cd1600801a3fe438ce3c86ceccb5de7a31f626286dd75ef02dbc9ec3f0019541eb980a76d8191fc

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks