Overview

overview

10

Static

static

5

order pdf.exe

windows7_x64

10

order pdf.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c86337b831ef4541b8d4d94ffbee82dbb7e8eda9ef36397395ffa7b468ceace0

  • Size

    1.1MB

  • Sample

    220521-mnh6kacah3

  • MD5

    3874376726b85bd41ec7aead7f126b80

  • SHA1

    b5d993d3c14ce4d2ec39805070ce1976f2c0786f

  • SHA256

    c86337b831ef4541b8d4d94ffbee82dbb7e8eda9ef36397395ffa7b468ceace0

  • SHA512

    2a1c3a057499bfc1d8b4bfd64a8bd5f93411ca47980e570e932dec5749f0ceb090ab3f7882d9cbb0fe26e80ca3270f9b39f7e44ba7511c4c1c8cabbe2c18e826

Score
10/10
agentteslacollectionkeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.fiscalitate.eu
  • Port:
    587
  • Username:
    onlineboxmonitor@fiscalitate.eu
  • Password:
    ;&7]PU*4yzVJ

Extracted

Credentials

  • Protocol:     smtp
  • Host:
    mail.fiscalitate.eu
  • Port:
    587
  • Username:
    onlineboxmonitor@fiscalitate.eu
  • Password:
    ;&7]PU*4yzVJ

Targets

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks