Overview

overview

10

Static

static

MedNet

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    documents and Details.bin

  • Size

    618KB

  • Sample

    210423-hbl28srkw2

  • MD5

    d7d91766708bfa54f07cb2ed6e9e4620

  • SHA1

    6afb76623f6bdf88b0a867648a1ea38d230e5e10

  • SHA256

    f00c9450706beb17b5cc705f2e5cfe7c509f1776e3f4de99d9b3dddb7e7660a1

  • SHA512

    95e18cdb4d3145c614e583591a1727e54b3e07c57f750096b8354d654fa48589a04d88d5178556bbef4732b254dc24584d93fecb35ef668788338eda33a659e1

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://files.000webhost.com/
  • Port:
    21
  • Username:
    zinco
  • Password:
    computer147

Targets

    • Target

      documents and Details.bin

    • Size

      618KB

    • MD5

      d7d91766708bfa54f07cb2ed6e9e4620

    • SHA1

      6afb76623f6bdf88b0a867648a1ea38d230e5e10

    • SHA256

      f00c9450706beb17b5cc705f2e5cfe7c509f1776e3f4de99d9b3dddb7e7660a1

    • SHA512

      95e18cdb4d3145c614e583591a1727e54b3e07c57f750096b8354d654fa48589a04d88d5178556bbef4732b254dc24584d93fecb35ef668788338eda33a659e1

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks