OCXQZK3KWmWNdRx.exe

General
Target

OCXQZK3KWmWNdRx.exe

Size

803KB

Sample

210122-ss997jyv4n

Score
10 /10
MD5

c6286c765c37478223b99c6ab0dc96f5

SHA1

eb043c7435526162e7e3a85005421fba3c1f3618

SHA256

8392af9cff73aab10a60befd359d4ca2638d6a936071285579147303bb453497

SHA512

04bfd49be5af17080f7fed1b28e665aa8a76e637589a3a0e4d846c79c79bfb56d78508898d2181b928e7483d7b4489f19831c58dea29ef0997d48b772da384e4

Malware Config
Targets
Target

OCXQZK3KWmWNdRx.exe

MD5

c6286c765c37478223b99c6ab0dc96f5

Filesize

803KB

Score
10 /10
SHA1

eb043c7435526162e7e3a85005421fba3c1f3618

SHA256

8392af9cff73aab10a60befd359d4ca2638d6a936071285579147303bb453497

SHA512

04bfd49be5af17080f7fed1b28e665aa8a76e637589a3a0e4d846c79c79bfb56d78508898d2181b928e7483d7b4489f19831c58dea29ef0997d48b772da384e4

Tags

Signatures

  • Suspicious use of SetThreadContext

  • AgentTesla

    Description

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    Tags

  • Reads data files stored by FTP clients

    Description

    Tries to access configuration files associated with programs like FileZilla.

    Tags

    TTPs

    Data from Local System Credentials in Files
  • Reads user/profile data of local email clients

    Description

    Email clients store some user data on disk where infostealers will often target it.

    Tags

    TTPs

    Data from Local System Credentials in Files
  • Reads user/profile data of web browsers

    Description

    Infostealers often target stored browser data, which can include saved credentials etc.

    Tags

    TTPs

    Data from Local System Credentials in Files

Related Tasks

MITRE ATT&CK Matrix
Command and Control
    Credential Access
    Defense Evasion
      Discovery
        Execution
          Exfiltration
            Impact
              Initial Access
                Lateral Movement
                  Persistence
                    Privilege Escalation
                      Tasks

                      static1

                      behavioral1

                      5/10