Overview

overview

10

Static

static

Document.exe

windows7_x64

10

Document.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Document.exe

  • Size

    917KB

  • Sample

    210511-sd8vj2d62e

  • MD5

    478df22800176813fad74c3dee12c8c6

  • SHA1

    03ba205b6e92d763dea64ccc7fa9cb95b6e68536

  • SHA256

    9115557e99de157473228d93416040638506bd166128351196200f424128a93f

  • SHA512

    ce0c351137bdabe6ed5c756d604facdc29c87c4c359a1032a4a1caa2bf31a4e1e4429730e6d178fef0f8cf1548d263640520a95094494762ccc0883d09c85336

Score
10/10
agentteslakeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

C2

https://hosseinsoltani.ir/wp-includes/Requests/Auth/vi/inc/98d006f6b6fe54.php

Targets

    • Target

      Document.exe

    • Size

      917KB

    • MD5

      478df22800176813fad74c3dee12c8c6

    • SHA1

      03ba205b6e92d763dea64ccc7fa9cb95b6e68536

    • SHA256

      9115557e99de157473228d93416040638506bd166128351196200f424128a93f

    • SHA512

      ce0c351137bdabe6ed5c756d604facdc29c87c4c359a1032a4a1caa2bf31a4e1e4429730e6d178fef0f8cf1548d263640520a95094494762ccc0883d09c85336

    Score
    10/10
    agentteslakeyloggerpersistencespywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks