Overview

overview

10

Static

static

BOQ.exe

windows7_x64

10

BOQ.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f574d1dbab7999f231424caf6e6e7a262acb34185dc69fa7420fd52400838c6

  • Size

    306KB

  • Sample

    220521-nzlaqshecp

  • MD5

    8a7a2c35d874e4cd26360eeb59ad3505

  • SHA1

    282b36afa95e9a02ec4f22337504a5e641a12cc1

  • SHA256

    5f574d1dbab7999f231424caf6e6e7a262acb34185dc69fa7420fd52400838c6

  • SHA512

    afb03c95a4b9b62e461d234ce52c05bc4f77b7a22a68b6df8df8a46ef191665bb890ffd79cb8c86c14d12c63e92635f160cb93a013c4f80ca3b45849a3bd341c

Score
10/10
agentteslacollectionkeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.privateemail.com
  • Port:
    587
  • Username:
    noni@damienzy.xyz
  • Password:
    @damienzy.xyz2240

Targets

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks