Overview

overview

10

Static

static

overdue in...df.exe

windows7_x64

10

overdue in...df.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d4ff3eaece5fb078d5487aaec85048eae39c80b5857f5b5745d3a3128e02aa30

  • Size

    636KB

  • Sample

    220520-18cq6saaaq

  • MD5

    f4006124ad3cd3247c1f065e050b3517

  • SHA1

    2469cd05c323152e14e41d33f85b6879c3b8ac7b

  • SHA256

    d4ff3eaece5fb078d5487aaec85048eae39c80b5857f5b5745d3a3128e02aa30

  • SHA512

    80313cf118a64eead4ce66238a0b26598e4daa86d45fb1e33d703a8ebc869608a02f6d49f199e861b11d8a50564d82c4bf2e4bae9d74dfa585bf2eb28a44d566

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.matrixas.in
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    info2013

Targets

    • Target

      overdue invoice.pdf.exe

    • Size

      1.3MB

    • MD5

      dc5f5ae953f37c7f54a3d787fc2353ca

    • SHA1

      75de209d727492f675faec351f728c2b9d09b565

    • SHA256

      ab5f254a91426311df7fe85d3442b62c7b69dd1c6e444ef725ddcba5a06ac961

    • SHA512

      32c651b7e91fd467616ab5391e4e4e51d343c4d91da4afbf8a8f63d5db2d3f60bca6cf3d77d88daa15da8cbdd7a9dccc7ab3766d859472ed7ca9e4b9ce9decd3

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks