Overview

overview

10

Static

static

f17d8c9478...b8.exe

windows7_x64

10

f17d8c9478...b8.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f17d8c94783597296264ab489cfc64b8.exe

  • Size

    625KB

  • Sample

    210419-qzpsnebtw6

  • MD5

    f17d8c94783597296264ab489cfc64b8

  • SHA1

    b967e59eabac83697e27576e54420623d5ebedfb

  • SHA256

    3b3f6d41ee6c1f630f6aa74edbe5d524fe2333a91e5234509c647432f663819f

  • SHA512

    b2ae3996f8a80b4e2689616b4b4443bfd9aff6633515713e451931650054b588e129389278f0e8eeb8820d5980f5f165f4cdc921a8d196a3a16f212628a3de38

Score
10/10
agentteslakeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.scrablex.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    Chisom123.

Targets

    • Target

      f17d8c94783597296264ab489cfc64b8.exe

    • Size

      625KB

    • MD5

      f17d8c94783597296264ab489cfc64b8

    • SHA1

      b967e59eabac83697e27576e54420623d5ebedfb

    • SHA256

      3b3f6d41ee6c1f630f6aa74edbe5d524fe2333a91e5234509c647432f663819f

    • SHA512

      b2ae3996f8a80b4e2689616b4b4443bfd9aff6633515713e451931650054b588e129389278f0e8eeb8820d5980f5f165f4cdc921a8d196a3a16f212628a3de38

    Score
    10/10
    agentteslakeyloggerpersistencespywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks