Overview

overview

10

Static

static

Overdue_pa...ue.exe

windows7_x64

10

Overdue_pa...ue.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Overdue_payment_issue.exe

  • Size

    1016KB

  • Sample

    210420-qs1led34ln

  • MD5

    38f35101820776553e9b942a9b98571c

  • SHA1

    43649461ff83ea6e5471e3088f090d37f7b911bc

  • SHA256

    b04f43c8581679d5db16a75292b9a4cb259dbd51af6ae8b8deadb85c0c4a90aa

  • SHA512

    6c2c1259bb48441fe5a0b88f7b15715736a280930767e422fd5124ab849a31141513340b07e607dcafafe559f5eace0677a27a03d38bb68f578ad943dbbb06e5

Score
10/10
agentteslakeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    webmail.mdist.us
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    pos#4321

Targets

    • Target

      Overdue_payment_issue.exe

    • Size

      1016KB

    • MD5

      38f35101820776553e9b942a9b98571c

    • SHA1

      43649461ff83ea6e5471e3088f090d37f7b911bc

    • SHA256

      b04f43c8581679d5db16a75292b9a4cb259dbd51af6ae8b8deadb85c0c4a90aa

    • SHA512

      6c2c1259bb48441fe5a0b88f7b15715736a280930767e422fd5124ab849a31141513340b07e607dcafafe559f5eace0677a27a03d38bb68f578ad943dbbb06e5

    Score
    10/10
    agentteslakeyloggerpersistencespywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Registry Run Keys / Startup Folder

1
T1060

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks