Overview

overview

10

Static

static

pol.exe

windows11_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pol.exe

  • Size

    627KB

  • Sample

    211019-y9gemsgdb4

  • MD5

    1363b11e2105d3486b2b5e8479c57a12

  • SHA1

    b9d24a83153aa0af8b1d00214096ddc75d0464e1

  • SHA256

    1a2283bb101bc94c20d48d0ad06f11ce6cb7d0ad76e117a4176b71900dd4c6b3

  • SHA512

    ac431b6933b6b46e73e958efed679986df80b8b867536908375b36bef259e4521b6488dea91c30ceb1cfd92b0c26a1f5d044ea4d824eff2eaa3280191575765b

Score
10/10
agentteslacollectionkeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    sg2plcpnl0023.prod.sin2.secureserver.net
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    User@40378

Targets

    • Target

      pol.exe

    • Size

      627KB

    • MD5

      1363b11e2105d3486b2b5e8479c57a12

    • SHA1

      b9d24a83153aa0af8b1d00214096ddc75d0464e1

    • SHA256

      1a2283bb101bc94c20d48d0ad06f11ce6cb7d0ad76e117a4176b71900dd4c6b3

    • SHA512

      ac431b6933b6b46e73e958efed679986df80b8b867536908375b36bef259e4521b6488dea91c30ceb1cfd92b0c26a1f5d044ea4d824eff2eaa3280191575765b

    Score
    10/10
    agentteslacollectionkeyloggerpersistencespywarestealertrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks