Overview

overview

10

Static

static

NEW_DOC_02...B).exe

windows7_x64

3

NEW_DOC_02...B).exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEW_DOC_02122021_009098.PDF (121KB).exe

  • Size

    696KB

  • Sample

    211202-dk76vaaeeq

  • MD5

    16121d662e114b1336a4ad6020cf79d4

  • SHA1

    6edec812f7ca2c4765db7d23e2c8ea3a8bf649e5

  • SHA256

    a9737b0f037cb0d159fe1ab785906e037b14d656c149176b4819098dc02cd64e

  • SHA512

    93cde2fd849410a9d75835f125f796410c18cf7ef28cd21865b68b5a85e2850eb99cf68bea576e3dc6f1b36d3a25abc3ddd140f9a60642538fe6c8b63308b0e2

Score
10/10
agentteslacollectionkeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.botswlogistics.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    admin@#1235

Targets

    • Target

      NEW_DOC_02122021_009098.PDF (121KB).exe

    • Size

      696KB

    • MD5

      16121d662e114b1336a4ad6020cf79d4

    • SHA1

      6edec812f7ca2c4765db7d23e2c8ea3a8bf649e5

    • SHA256

      a9737b0f037cb0d159fe1ab785906e037b14d656c149176b4819098dc02cd64e

    • SHA512

      93cde2fd849410a9d75835f125f796410c18cf7ef28cd21865b68b5a85e2850eb99cf68bea576e3dc6f1b36d3a25abc3ddd140f9a60642538fe6c8b63308b0e2

    Score
    10/10
    agentteslacollectionkeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks