Overview

overview

10

Static

static

SOA MARCH 2021.exe

windows7_x64

10

SOA MARCH 2021.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SOA MARCH 2021.exe

  • Size

    1.2MB

  • Sample

    210421-hz2gckh5gs

  • MD5

    84b944e527da612d0fb17f3280f9465d

  • SHA1

    a398dc081f31df7bbccd5799c8eba227f4a70fcd

  • SHA256

    8332c253900ae23ef04e6d9bdb72cf5c12247a1e0cd42c6b15eaccbf1ff106df

  • SHA512

    123e218ed60a20f782186cba3d910cd4c3c0e7eca17aee784ca131cd4ca752c90bf5afac8462977976b49c62a7448041036b063961063e4d794c25483f951525

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.vivaldi.net
  • Port:
    587
  • Username:
    Ricardo2021@vivaldi.net
  • Password:
    Qwerty2020Hp##

Targets

    • Target

      SOA MARCH 2021.exe

    • Size

      1.2MB

    • MD5

      84b944e527da612d0fb17f3280f9465d

    • SHA1

      a398dc081f31df7bbccd5799c8eba227f4a70fcd

    • SHA256

      8332c253900ae23ef04e6d9bdb72cf5c12247a1e0cd42c6b15eaccbf1ff106df

    • SHA512

      123e218ed60a20f782186cba3d910cd4c3c0e7eca17aee784ca131cd4ca752c90bf5afac8462977976b49c62a7448041036b063961063e4d794c25483f951525

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks