Overview

overview

10

Static

static

INVOICE34_...15.exe

windows7_x64

10

INVOICE34_...15.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    INVOICE34_56730015.exe

  • Size

    801KB

  • Sample

    210511-ekbb5evfxe

  • MD5

    ad623a158d7f37f547dee2ba01646c0d

  • SHA1

    3d55829677ffb85e1be6feded9bec255163fe250

  • SHA256

    3e144aa347f286c75f9ffe827f6239652065f468794bf567e47d87e29c3ea53b

  • SHA512

    756d907400810a392d43a7a87a44a7331383463f6a0b6b4608f83542736436d9665b5e3d6e2fffebd532aa43680d339baa344d60d7274dd26ef2f3f64f4dba9c

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.dadabhoy.edu.pk
  • Port:
    587
  • Username:
    ghulam.sarwar@dadabhoy.edu.pk
  • Password:
    Dadabhoy.456

Targets

    • Target

      INVOICE34_56730015.exe

    • Size

      801KB

    • MD5

      ad623a158d7f37f547dee2ba01646c0d

    • SHA1

      3d55829677ffb85e1be6feded9bec255163fe250

    • SHA256

      3e144aa347f286c75f9ffe827f6239652065f468794bf567e47d87e29c3ea53b

    • SHA512

      756d907400810a392d43a7a87a44a7331383463f6a0b6b4608f83542736436d9665b5e3d6e2fffebd532aa43680d339baa344d60d7274dd26ef2f3f64f4dba9c

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks