Overview

overview

10

Static

static

scan-copy.exe

windows7_x64

10

scan-copy.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    785e905204e3e90c61e99b45f82c75d2abffe3ca22c5a31f86f34554b275bd6e

  • Size

    457KB

  • Sample

    220520-29gxysgdh4

  • MD5

    429e49e69d1777f0c94fd75c455016da

  • SHA1

    82cd46e35d2b84899d7193cef33dae8aed3035b4

  • SHA256

    785e905204e3e90c61e99b45f82c75d2abffe3ca22c5a31f86f34554b275bd6e

  • SHA512

    9b4a759391ae4b6feb50b4c5db24ca00d00d0dae4de07c616ffadc42592e61165eeaca1de1a7d916a8f04dffd203c5d4ea4859dcac286d67cb8d74bd8ed4f205

Score
10/10
agentteslacollectionkeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.privateemail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    111aaa

Targets

    • Target

      scan-copy.exe

    • Size

      595KB

    • MD5

      0ac8b9e958f9fc143c114c1046a33241

    • SHA1

      8310b20820a1f3f936dac349f3f97bae38a70324

    • SHA256

      1fb2dc85595d9769b6d83c91875511e7b3e5a70df5dc2e561fd5c3dc0eab91c5

    • SHA512

      a7fab37dc6a9f9b0ebb7d9820b5d5455d49045be101db8e4c4f92beb6583fc911c79cbe1b6fa501797b8dd1cfa2cdc017ac4d9489b179d088c98ed5d1fe5e29a

    Score
    10/10
    agentteslacollectionkeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks