Overview

overview

10

Static

static

Product Ra...15.exe

windows7_x64

3

Product Ra...15.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Product Range #2828915.exe

  • Size

    648KB

  • Sample

    210511-mea4wtskmx

  • MD5

    a38866790c8c35700168dcbf70c451a4

  • SHA1

    1c465c58bafc50427e4facab66bbbbc576dfee0e

  • SHA256

    1252078421caf8c3415891ca9012a285c509a1b952b56cc84d163000155def0a

  • SHA512

    99af98c49bdbf2bbbe040f79e3cbd7e837478ec98a11e34a9e2c38580620f4327eb6025174ec593ae1bfd59c31f1ef01145d3ada8e2e1cd68401d850757feaeb

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    us2.smtp.mailhostbox.com
  • Port:
    587
  • Username:
    aseel.albiaty@rvwtechno.com
  • Password:
    lDRsz!u1

Targets

    • Target

      Product Range #2828915.exe

    • Size

      648KB

    • MD5

      a38866790c8c35700168dcbf70c451a4

    • SHA1

      1c465c58bafc50427e4facab66bbbbc576dfee0e

    • SHA256

      1252078421caf8c3415891ca9012a285c509a1b952b56cc84d163000155def0a

    • SHA512

      99af98c49bdbf2bbbe040f79e3cbd7e837478ec98a11e34a9e2c38580620f4327eb6025174ec593ae1bfd59c31f1ef01145d3ada8e2e1cd68401d850757feaeb

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks