Overview

overview

10

Static

static

Payment co...DF.zip

windows7-x64

1

Payment co...DF.zip

windows10-2004-x64

1

Payment co...DF.exe

windows7-x64

10

Payment co...DF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Payment copy_00000988.PDF.zip

  • Size

    614KB

  • Sample

    220930-qgbppadfb8

  • MD5

    cdc1c2d61823f4b0f60ba213af125be1

  • SHA1

    0df34f03d6eebc24e7f138ba4f541c80fe2e3934

  • SHA256

    8f3295bfd93ef5affb09b0f2c5ccde4aa33b0c94c117cbfb4b09045fe6201d3e

  • SHA512

    29e7b10b171d4c1ef0ba3850d9cc0be90b5b329e07dbd9a0a3ed8a2c715e3602cc83f41d730197f598ffd654c9b906378d0f488827f88b66294b5ada1d4a0435

  • SSDEEP

    12288:u2i/SwBwo8FGiN3ZW5fA/Ku3NRJC3guGUw7ZI9UA7MHLoM:u1awBwo8oiW5fA/d3wguneI9/oHD

Score
10/10
agentteslacollectionkeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.darnfoss.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    QhMzMMh0

Targets

    • Target

      Payment copy_00000988.PDF.zip

    • Size

      614KB

    • MD5

      cdc1c2d61823f4b0f60ba213af125be1

    • SHA1

      0df34f03d6eebc24e7f138ba4f541c80fe2e3934

    • SHA256

      8f3295bfd93ef5affb09b0f2c5ccde4aa33b0c94c117cbfb4b09045fe6201d3e

    • SHA512

      29e7b10b171d4c1ef0ba3850d9cc0be90b5b329e07dbd9a0a3ed8a2c715e3602cc83f41d730197f598ffd654c9b906378d0f488827f88b66294b5ada1d4a0435

    • SSDEEP

      12288:u2i/SwBwo8FGiN3ZW5fA/Ku3NRJC3guGUw7ZI9UA7MHLoM:u1awBwo8oiW5fA/d3wguneI9/oHD

    Score
    1/10
    behavioral1behavioral2

    • Target

      Payment copy_00000988.PDF.exe

    • Size

      822KB

    • MD5

      21ab035bf0bb26fed935ca7265045272

    • SHA1

      9091f79f60c8a52e7f75e6055363a32bea28b833

    • SHA256

      2f33e37286a03dee0a89bbac812d166203e5ddb1f6c2571110a08690a0df1bd0

    • SHA512

      79cee8569eaa5d96b7781c2852da45539c8db3892c0d8d97b665bae722b32ea4bc8a3f511399888ba7a002a7ee633f7e4f97c9249aa101ce77c35c97a5fc8232

    • SSDEEP

      12288:I2iNJOLvLwo41Giv3Z2HfAZWM7dPJC1g+GU27ZUZUk7MHJ6:I1CLwo4YikHfAZR7Cg+n4UZZoH

    Score
    10/10
    agentteslakeyloggerspywarestealertrojancollection
    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks