Overview

overview

10

Static

static

d9667de328...58.exe

windows7_x64

10

d9667de328...58.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9667de328dbeef055555f0303914558.exe

  • Size

    826KB

  • Sample

    210421-fsdtvrvsk2

  • MD5

    d9667de328dbeef055555f0303914558

  • SHA1

    8234abd9ce4a8dc1f88d0213e31871f7f3bce2bb

  • SHA256

    3f2ce17fe342c19e6ac9890f379841df3c448099e6565b9906538b463fc02932

  • SHA512

    41b3cde7ce605744a912656de3791d33f0c840965faef156d2a0bdb7d520c619f57f08c356e9bd193430bfdd381bcc0bee832616a9f58b12bc38324fa231e0ca

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    us2.smtp.mailhostbox.com
  • Port:
    587
  • Username:
    sales@julislinq.com
  • Password:
    27!iaL@!U@L5Ma

Targets

    • Target

      d9667de328dbeef055555f0303914558.exe

    • Size

      826KB

    • MD5

      d9667de328dbeef055555f0303914558

    • SHA1

      8234abd9ce4a8dc1f88d0213e31871f7f3bce2bb

    • SHA256

      3f2ce17fe342c19e6ac9890f379841df3c448099e6565b9906538b463fc02932

    • SHA512

      41b3cde7ce605744a912656de3791d33f0c840965faef156d2a0bdb7d520c619f57f08c356e9bd193430bfdd381bcc0bee832616a9f58b12bc38324fa231e0ca

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks