Overview

overview

10

Static

static

ENQUIRY.exe

windows7_x64

10

ENQUIRY.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ENQUIRY.exe

  • Size

    570KB

  • Sample

    211021-nsvwlaaca7

  • MD5

    dfc7cff14929dc6879d88a2c514bfef8

  • SHA1

    319f1833848a98c976c1eb074af16a52ee4d1433

  • SHA256

    a6229790b0a76fded9219434078e2ba9349cd636ee4fa6c633d0779a464c07f7

  • SHA512

    452237738c52331f7dce3d5d6da93464a7be47c4ffe1d782958c562beed0021717465fda0db9115392a4766f2b8f7ef0ccd89645e2b7d8b4fe75ac3ccb70d85b

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.aldhiyafainteriors.com
  • Port:
    587
  • Username:
    rahman@aldhiyafainteriors.com
  • Password:
    dhiyafa@987

Targets

    • Target

      ENQUIRY.exe

    • Size

      570KB

    • MD5

      dfc7cff14929dc6879d88a2c514bfef8

    • SHA1

      319f1833848a98c976c1eb074af16a52ee4d1433

    • SHA256

      a6229790b0a76fded9219434078e2ba9349cd636ee4fa6c633d0779a464c07f7

    • SHA512

      452237738c52331f7dce3d5d6da93464a7be47c4ffe1d782958c562beed0021717465fda0db9115392a4766f2b8f7ef0ccd89645e2b7d8b4fe75ac3ccb70d85b

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks