Overview

overview

10

Static

static

3

COPY-SCANB...DF.exe

windows7-x64

10

COPY-SCANB...DF.exe

windows10-2004-x64

10

COPY-SCANB...DF.exe

windows11-21h2-x64

10

Resubmissions

29-04-2024 23:50

240429-3vzd5aea86 10

09-11-2020 19:26

201109-7p6mxbz6r2 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    COPY-SCANB840284-IMG-2020-13-02-DOCUMENT-PDF.exe

  • Size

    461KB

  • Sample

    240429-3vzd5aea86

  • MD5

    2f6432c5af8d10b04caed90d410ec7ad

  • SHA1

    4b1fc10818dd534922feef4d521eb3574337e3c0

  • SHA256

    094fd325049b8a9cf6d3e5ef2a6d4cc6a567d7d49c35f8bb8dd9e3c6acf3d78d

  • SHA512

    ce04cb02a8abd991327487a2f70014739d4f244930caa95f5246dd5925624c54e3c5abb3e0efb6c8944be379b393f5556ae203ad8f752913bedea3ec8574ef6e

  • SSDEEP

    12288:GCU4gtAxIflaBAFGWf1yN6OcsiUIpqpcsHs4d8/U:MwIflaBaIH2Us69d88

Score
10/10
agentteslakeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    mail.technomatic.in
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    coordinator4@123

Targets

    • Target

      COPY-SCANB840284-IMG-2020-13-02-DOCUMENT-PDF.exe

    • Size

      461KB

    • MD5

      2f6432c5af8d10b04caed90d410ec7ad

    • SHA1

      4b1fc10818dd534922feef4d521eb3574337e3c0

    • SHA256

      094fd325049b8a9cf6d3e5ef2a6d4cc6a567d7d49c35f8bb8dd9e3c6acf3d78d

    • SHA512

      ce04cb02a8abd991327487a2f70014739d4f244930caa95f5246dd5925624c54e3c5abb3e0efb6c8944be379b393f5556ae203ad8f752913bedea3ec8574ef6e

    • SSDEEP

      12288:GCU4gtAxIflaBAFGWf1yN6OcsiUIpqpcsHs4d8/U:MwIflaBaIH2Us69d88

    Score
    10/10
    agentteslakeyloggerpersistencespywarestealertrojan
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks