Overview

overview

10

Static

static

biggest.exe

windows7_x64

10

biggest.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    biggest.exe

  • Size

    865KB

  • Sample

    210421-r4t83pbh4s

  • MD5

    30bd38d2a90db3510019a3fe7dae45cd

  • SHA1

    ac16719ecd9103689f42ee1719eb6f1b444dba4b

  • SHA256

    5d2ecd7210251e5d86670bd25655976536c0ac15f65185ea7003467be2ee5b19

  • SHA512

    a41ed21642beee783f844d7eac920d2edcab180def732afcbd5d021bf8a72c09a2fe33ab6da5980dabca3230c4a0e73af29ee883bfac2e94aac71cdbd595be84

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.privateemail.com
  • Port:
    587
  • Username:
    prodip@precisionenergy.me
  • Password:
    @Mexico1.,

Targets

    • Target

      biggest.exe

    • Size

      865KB

    • MD5

      30bd38d2a90db3510019a3fe7dae45cd

    • SHA1

      ac16719ecd9103689f42ee1719eb6f1b444dba4b

    • SHA256

      5d2ecd7210251e5d86670bd25655976536c0ac15f65185ea7003467be2ee5b19

    • SHA512

      a41ed21642beee783f844d7eac920d2edcab180def732afcbd5d021bf8a72c09a2fe33ab6da5980dabca3230c4a0e73af29ee883bfac2e94aac71cdbd595be84

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks