General

  • Target
    QYRQtZONGOaChQIuWnOgHwNfXphqsTaz.exe
  • Size 213KB
  • Sample211005-11mleaada9
  • SHA256 ba9fe1f154b98085f694fc4eee4fe19b0337d304b1cb47633b566beced96df93
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • agenttesla

C2
  • http://bot.statusupdate.one/webpanel-og/mawa/549c03609890dee87e18.php

Targets

    • Target
      QYRQtZONGOaChQIuWnOgHwNfXphqsTaz.exe
    • Size 213KB
    • SHA256 ba9fe1f154b98085f694fc4eee4fe19b0337d304b1cb47633b566beced96df93
    • MD5 SHA1 SHA512
    Score
    8/10
    • Drops file in Drivers directory

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks