General

  • Target

    SWIFTS 001-010.exe

  • Size

    753KB

  • Sample

    210722-x2hw8jdxe6

  • MD5

    6e52dbe109a73faf3eae3ffea3b46e76

  • SHA1

    67de2ae6d91c9c53767b0eb8270208dd93594996

  • SHA256

    8e7ebca2166256f89d506b309b900d60abf4118d2b76a802fb0ae347f59081b7

  • SHA512

    ca701c245c3ca21d24c5b391f2f9671d4fee1fb1c01889332cc95cbd6f4a1212ab7d715bebd939220a3d48f98d6e4114aa61afb2eb232cdbc9a0831275dd987e

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    mail.bmrtecpack.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    ABdiamond6_

Targets

    • Target

      SWIFTS 001-010.exe

    • Size

      753KB

    • MD5

      6e52dbe109a73faf3eae3ffea3b46e76

    • SHA1

      67de2ae6d91c9c53767b0eb8270208dd93594996

    • SHA256

      8e7ebca2166256f89d506b309b900d60abf4118d2b76a802fb0ae347f59081b7

    • SHA512

      ca701c245c3ca21d24c5b391f2f9671d4fee1fb1c01889332cc95cbd6f4a1212ab7d715bebd939220a3d48f98d6e4114aa61afb2eb232cdbc9a0831275dd987e

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Discovery

System Information Discovery

1
T1082

Tasks