Overview

overview

10

Static

static

PAYMENT COPY.exe

windows7_x64

10

PAYMENT COPY.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PAYMENT COPY.exe

  • Size

    911KB

  • Sample

    210511-zk8a96qarx

  • MD5

    497fdb0a1fa8970ac4e81aa66278b6ed

  • SHA1

    5bacbe7521f6d6de1a7efc85d92fddf7fd358b21

  • SHA256

    c70bf2aeaa6b9f644dadc0617debe3ec20671adc1e2ee8c60a8a932bf99e3c63

  • SHA512

    b52fccf2ff91ae3a4ed7d87ba14ba715a8780e7004e632995949757fc3f414312f12c1c141d5033c3764cfcbd6955644514ff1961813fe5551cace35cdfa66f1

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.dadabhoy.edu.pk
  • Port:
    587
  • Username:
    ghulam.sarwar@dadabhoy.edu.pk
  • Password:
    Dadabhoy.456

Targets

    • Target

      PAYMENT COPY.exe

    • Size

      911KB

    • MD5

      497fdb0a1fa8970ac4e81aa66278b6ed

    • SHA1

      5bacbe7521f6d6de1a7efc85d92fddf7fd358b21

    • SHA256

      c70bf2aeaa6b9f644dadc0617debe3ec20671adc1e2ee8c60a8a932bf99e3c63

    • SHA512

      b52fccf2ff91ae3a4ed7d87ba14ba715a8780e7004e632995949757fc3f414312f12c1c141d5033c3764cfcbd6955644514ff1961813fe5551cace35cdfa66f1

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks