Overview

overview

10

Static

static

documents.exe

windows7_x64

10

documents.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    documents.exe

  • Size

    931KB

  • Sample

    210511-19qrgphdvs

  • MD5

    dabf948fefbfb4f9865e3f5a21582f37

  • SHA1

    6bdd7d4796e442bbef69b5beb40642c1d96e8f4d

  • SHA256

    4df30f642fff436c30bef6a48d5e8b6031fbb9236bf85e03c020bb42e9fdb734

  • SHA512

    7537f94d4374e6e8f7127ca40b3a9901168b394f5739b8856180f9cb913de5f17480cddcb222133bf2ad3eaaf5700e49eb0a5c100accad626ec225a69d552858

Score
10/10
agentteslakeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

C2

http://hosseinsoltani.ir/wp-includes/ikkk/inc/2cd7296286fa89.php

Targets

    • Target

      documents.exe

    • Size

      931KB

    • MD5

      dabf948fefbfb4f9865e3f5a21582f37

    • SHA1

      6bdd7d4796e442bbef69b5beb40642c1d96e8f4d

    • SHA256

      4df30f642fff436c30bef6a48d5e8b6031fbb9236bf85e03c020bb42e9fdb734

    • SHA512

      7537f94d4374e6e8f7127ca40b3a9901168b394f5739b8856180f9cb913de5f17480cddcb222133bf2ad3eaaf5700e49eb0a5c100accad626ec225a69d552858

    Score
    10/10
    agentteslakeyloggerpersistencespywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks