Static task
static1
Behavioral task
behavioral1
Sample
3bfaa6286d8fbef05f151d5187b10b0d1db59112e36da9240e240c28a143b624.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3bfaa6286d8fbef05f151d5187b10b0d1db59112e36da9240e240c28a143b624.exe
Resource
win10v2004-20220414-en
General
-
Target
3bfaa6286d8fbef05f151d5187b10b0d1db59112e36da9240e240c28a143b624
-
Size
868KB
-
MD5
2ee1b13c5fda8793a1e49f301dbbc0d2
-
SHA1
14e6c23aadeaaadcd730d1fa360f0e27940f0184
-
SHA256
3bfaa6286d8fbef05f151d5187b10b0d1db59112e36da9240e240c28a143b624
-
SHA512
493d0b189220b7a1f1b1b5e828ef809c39f0436f45ee6bd5ae5e318b130c5881264ab1c12f3292af7ecdcb11ce10a1183be69541a2592fcfe8183c6b22693a75
-
SSDEEP
6144:7Hv9I2BJkXbceOgNfBO9IOR3gawnDq0PWQpvbDjiziSLf0ebB7WRg29ZqFspg:7FbJkXg1Qfg95SDlPJpvrA0e9KRp7pg
Malware Config
Signatures
-
AgentTesla Payload 1 IoCs
Processes:
resource yara_rule sample family_agenttesla -
Agenttesla family
Files
-
3bfaa6286d8fbef05f151d5187b10b0d1db59112e36da9240e240c28a143b624.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 865KB - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ