Static task
static1
Behavioral task
behavioral1
Sample
sample_40.exe
Resource
win7-en-20211014
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
sample_40.exe
Resource
win10-en-20210920
0 signatures
0 seconds
General
-
Target
sample_40.exe
-
Size
217KB
-
MD5
14130b3d5c550a284dfce9bc0d3a8366
-
SHA1
f6d5ae57e2e6a92a958209c37bbe0081c4de1ea2
-
SHA256
414f2dcbc980b5189bab801cf3a2570d7c7126e999d21ad2ea287ace675f23ff
-
SHA512
3308bd8a67aa365d0ec5fa69acf5d990173d7bbdef10abcda76b537a8f0ffd1c4e7f7238294a0b0a9700fc58259598d24e91cf6296e8eca64765c9f4325758f8
Score
10/10
Malware Config
Extracted
Family
agenttesla
C2
http://69.174.99.181/webpanel-trade/mawa/6077ebc1143fe7254b31.php
Signatures
-
AgentTesla Payload 1 IoCs
Processes:
resource yara_rule sample family_agenttesla -
Agenttesla family
Files
-
sample_40.exe.exe windows x86