Overview

overview

10

Static

static

DHL Details.exe

windows7_x64

10

DHL Details.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DHL Details.exe

  • Size

    961KB

  • Sample

    210201-v3btlr131a

  • MD5

    4d9268d53a9589f7e25326f8231fa93e

  • SHA1

    f65ed64320fd581e95da2f579ae94947708cba53

  • SHA256

    2c9d9f9c0f927827d9847b327d2540f7203cb7cb29b82e34f910ac12fa5e765b

  • SHA512

    8fa3ab7de4bd8c31f3cee2343034228e7dc9e6293b714fe97549b2ca2e2da0cacd77cb7529ec7a4cf1db983257f3c0bba08a24ac82df05765f400132e0034b07

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    server126.web-hosting.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    TB@h;x2zl*5c

Targets

    • Target

      DHL Details.exe

    • Size

      961KB

    • MD5

      4d9268d53a9589f7e25326f8231fa93e

    • SHA1

      f65ed64320fd581e95da2f579ae94947708cba53

    • SHA256

      2c9d9f9c0f927827d9847b327d2540f7203cb7cb29b82e34f910ac12fa5e765b

    • SHA512

      8fa3ab7de4bd8c31f3cee2343034228e7dc9e6293b714fe97549b2ca2e2da0cacd77cb7529ec7a4cf1db983257f3c0bba08a24ac82df05765f400132e0034b07

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks