Overview

overview

10

Static

static

DHL Online...pt.exe

windows7_x64

10

DHL Online...pt.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DHL Online Receipt.XZ

  • Size

    426KB

  • Sample

    211021-qv8xcaadb6

  • MD5

    2a3b4f6a1e9e5e721313edbf9ddfac08

  • SHA1

    6f0f7fe0fa692bc2f644436466753659b73ce26e

  • SHA256

    a734d7b40d2707ceeff62f50957d490b1bb56f3d1835118c5285b617c41844d0

  • SHA512

    1ba3d55d4521f1b0610f1fade16b1db9b0da5948c8a9d64281c4a0699d2d9c88fffbcd2c12c055f7e109422f94c7eb45c5f6bb3aa0444abc9c287e108f80a9ac

Score
10/10
agentteslacollectionkeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    us2.smtp.mailhostbox.com
  • Port:
    587
  • Username:
    sandra.hurm@voestallpine.com
  • Password:
    project2021blessing

Targets

    • Target

      DHL Online Receipt.exe

    • Size

      501KB

    • MD5

      b265fa5c20dcb7fc8a7c715f5194edcf

    • SHA1

      c6e34ec56347f92353148f221b36e06b99b173b9

    • SHA256

      704c8c0960f492c87928d15659a3e16df0c76591d0abaa83a011c58d4fd98ae2

    • SHA512

      9351234939bad33f778cc54cfb848ea2cb6a6795ad671e7aa3bd0d39c3ab7a125c0ddc63404635b83a3a4515cc0a1ea655c2f1579eda7c9aa4dfde88ad1df255

    Score
    10/10
    agentteslacollectionkeyloggerpersistencespywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks