agenttesla | SecuriteInfo[.]com[.]Trojan[.]PWS[.]StealerNET[.]122[.]22451[.]22739

General

Target
SecuriteInfo.com.Trojan.PWS.StealerNET.122.22451.22739
Size 210KB
Sample220727-31qdeaaghn
SHA256 e1f6499af945fbe2e4f284b3876da1182ed49bd33ee58eb5989585cf2413e9d1
MD5 ac89d7c4776067cd66dbadeacde33c5a
SHA1 551f515a99f2bdafd1132f5054d97068cebaf570
SHA512 ccfa8ad0ed4b00d932fd07b82c08d5772aca7172c9a8ca0a7fcee2b949f0dfb81e81758ecdcc1958f7ad509042442b2390c373fcdf261f63695583e8ba3e17f0
SSDEEP 3072:G8mKHFSqUm+SeqJZSOV6TdokIn9F/wjUa74aYJa12IWSnjUWIGRv9hgoZIacgG:G8mmOzuZ0dob9eUa74aJfjUWrhgoSa
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5365557519:AAHeYLS_Choo-nwdQ1zGxyVYXnQ0-De8C-c/sendDocument

Signatures

Agenttesla family
agenttesla

File Explorer

SecuriteInfo.com.Trojan.PWS.StealerNET.122.22451.22739

.exe 210KB

SecuriteInfo.com.Trojan.PWS.StealerNET.122.22451.22739

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e1f6499af945fbe2e4f284b3876da1182ed49bd33ee58eb5989585cf2413e9d1
MD5 ac89d7c4776067cd66dbadeacde33c5a
SHA1 551f515a99f2bdafd1132f5054d97068cebaf570
SHA512 ccfa8ad0ed4b00d932fd07b82c08d5772aca7172c9a8ca0a7fcee2b949f0dfb81e81758ecdcc1958f7ad509042442b2390c373fcdf261f63695583e8ba3e17f0
SSDEEP 3072:G8mKHFSqUm+SeqJZSOV6TdokIn9F/wjUa74aYJa12IWSnjUWIGRv9hgoZIacgG:G8mmOzuZ0dob9eUa74aJfjUWrhgoSa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

220446

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing