Overview

overview

10

Static

static

10

fa3128043b...b2.exe

windows7_x64

10

fa3128043b...b2.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa3128043b6fd2dbaab4ebcf3b1fbe0f536f80dee557ab445a25ba90b65153b2.exe

  • Size

    214KB

  • MD5

    642488dcd4926b2ea57062fe40411f93

  • SHA1

    cbe7391711ea39df145769d0976b50f1f525d058

  • SHA256

    fa3128043b6fd2dbaab4ebcf3b1fbe0f536f80dee557ab445a25ba90b65153b2

  • SHA512

    9444a79ec8fee22451b2923536d974aa43fe348c7f470d4abf62126e8e963210478877fe5c6c59d0581f8ea24131c1b044af8f710ce8b10d00ef702103a46735

  • SSDEEP

    3072:QGW7cydPF6d21YRnDkEzUsjyQ3os4gc8GFlQAoRp28LHyZSOBaUyQwg4t/lW2L:QA26nQ2URQzGUTRdbyANWotW

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.voscorp.net/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    alibaba.com

Signatures

  • AgentTesla Payload 1 IoCs
  • Agenttesla family
    agenttesla

Files

  • fa3128043b6fd2dbaab4ebcf3b1fbe0f536f80dee557ab445a25ba90b65153b2.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections