agenttesla | pago perdido correspondiente[.]exe

General

Target
pago perdido correspondiente.exe
Size 209KB
Sample220419-hwg61sdff3
SHA256 453fa70b33e7ae4dee6a39f4cf2f1a347aab979e4c172a684be0de3fb57bb0a0
MD5 d052c2671a61474201a3b311971876dd
SHA1 2f9375c85615aae2c31872f92ba19291be801264
SHA512 53331dae40f04a93b265626bee4c999cce030685d36e4c9e617b0fe3dbf11a08858fb506c645b3de00bbe7ba4eb2cd1d7b5111f8bc8871a324e83d4a10b54f98
SSDEEP 3072:8qDIZSWJ+IK7KDOOsqIsqpOk9KCSC9U35Dy9QOU6xBSpSUaoEfGjmz+TknzoaHEU:NDl5YIsqQkxtU35DyH0ANfL+yca
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.ferdi.hu
Port
587
Username
[email protected]
Password
Q1w2e3r4t5!
Email to
[email protected]

Signatures

Agenttesla family
agenttesla

File Explorer

pago perdido correspondiente.exe

.exe 209KB

pago perdido correspondiente.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 453fa70b33e7ae4dee6a39f4cf2f1a347aab979e4c172a684be0de3fb57bb0a0
MD5 d052c2671a61474201a3b311971876dd
SHA1 2f9375c85615aae2c31872f92ba19291be801264
SHA512 53331dae40f04a93b265626bee4c999cce030685d36e4c9e617b0fe3dbf11a08858fb506c645b3de00bbe7ba4eb2cd1d7b5111f8bc8871a324e83d4a10b54f98
SSDEEP 3072:8qDIZSWJ+IK7KDOOsqIsqpOk9KCSC9U35Dy9QOU6xBSpSUaoEfGjmz+TknzoaHEU:NDl5YIsqQkxtU35DyH0ANfL+yca
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

220094

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing