Overview

overview

10

Static

static

RFQ.exe

windows7_x64

10

RFQ.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RFQ.exe

  • Size

    519KB

  • Sample

    210226-ejaejq2yfs

  • MD5

    59addf908576fc93f44a53596bfd79b6

  • SHA1

    b62ffb71adbe02aa75fec583d3b9e68f16b6acfa

  • SHA256

    ce45f8e14c6ad2c325d7b4037dbcdc5f3308a9e9aec290ed9b91809054a4a4b8

  • SHA512

    8d97a7abade54313e896f6725fe2aa76fb2bec30ccf4d1bceed218cd8fe711bc5b53627bd4a080380f97e198f16fd466e6ef1a8d50cc2942cbe18252400fccbc

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1430995407:AAHXagqOb3lOiloF-tdsg1GOLPStlDuzDNw/sendDocument

Targets

    • Target

      RFQ.exe

    • Size

      519KB

    • MD5

      59addf908576fc93f44a53596bfd79b6

    • SHA1

      b62ffb71adbe02aa75fec583d3b9e68f16b6acfa

    • SHA256

      ce45f8e14c6ad2c325d7b4037dbcdc5f3308a9e9aec290ed9b91809054a4a4b8

    • SHA512

      8d97a7abade54313e896f6725fe2aa76fb2bec30ccf4d1bceed218cd8fe711bc5b53627bd4a080380f97e198f16fd466e6ef1a8d50cc2942cbe18252400fccbc

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks