Overview

overview

10

Static

static

Overdue_pa...ue.exe

windows7_x64

10

Overdue_pa...ue.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Overdue_payment_issue.7z

  • Size

    751KB

  • Sample

    210420-r4f6zcr7zj

  • MD5

    484e9014d9fa4d53825ac281266c08c2

  • SHA1

    f7ebabee3c793a36598734fa8db8883f95929847

  • SHA256

    8b5608724048fba30ceb22c97434429717054245b8c35c675462e9da1607a9d8

  • SHA512

    06f618dd6cd07fdd1e244ee8e224d18423c7a37984708983e5dbc92e8732e7703527ded4682547a6116e77abca15bdb673951b904fcd0df08afda606e55ecb8c

Score
10/10
agentteslakeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    webmail.mdist.us
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    pos#4321

Targets

    • Target

      Overdue_payment_issue.exe

    • Size

      1016KB

    • MD5

      38f35101820776553e9b942a9b98571c

    • SHA1

      43649461ff83ea6e5471e3088f090d37f7b911bc

    • SHA256

      b04f43c8581679d5db16a75292b9a4cb259dbd51af6ae8b8deadb85c0c4a90aa

    • SHA512

      6c2c1259bb48441fe5a0b88f7b15715736a280930767e422fd5124ab849a31141513340b07e607dcafafe559f5eace0677a27a03d38bb68f578ad943dbbb06e5

    Score
    10/10
    agentteslakeyloggerpersistencespywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Registry Run Keys / Startup Folder

1
T1060

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks