Overview

overview

10

Static

static

RFQ FOR JU...ER.exe

windows7_x64

10

RFQ FOR JU...ER.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15b121c6bc9422913028b027e5c489a59072561a8085a444b1ccc600d13dac7d

  • Size

    377KB

  • Sample

    220521-bx6sfacfe4

  • MD5

    cd12f69e5c3738f9681a642c74f6678e

  • SHA1

    3a2e5396a72d11eb3b39013f66f1e6d7bf2cf85d

  • SHA256

    15b121c6bc9422913028b027e5c489a59072561a8085a444b1ccc600d13dac7d

  • SHA512

    a1184740ea494a77ac8f964eb58095995e8d8aa6643bdc512b7629970409031cbe708c24406dadfc091e3817d49b5ee89f3978706bd18ea5d76ba01cb8e1e847

Score
10/10
agentteslacollectionkeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.yandex.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    smart123456smart

Extracted

Credentials

  • Protocol:     smtp
  • Host:
    smtp.yandex.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    smart123456smart

Targets

    • Target

      RFQ FOR JULY ORDER.exe

    • Size

      468KB

    • MD5

      f18bd14e8cdc7139806ca7b034fc4b45

    • SHA1

      bf6b6dbabc3e8a41a34cb6abe3585220656ca55f

    • SHA256

      b3850a4a20e894c6b6510b89e84a93c91e48db0a5ae667c913ed212090308c8c

    • SHA512

      a9a6df7d3a26cd1166008cbd24bf6e7c499d62dc86c012bd30e1fb881fecf618741fafd45f045da07a4e424d7852bb9752dbdcd5be14e713af6d5a17accdad18

    Score
    10/10
    agentteslacollectionkeyloggerspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks