agenttesla | SecuriteInfo[.]com[.]Trojan[.]PWS[.]Stealer[.]32955[.]13532[.]30175

General

Target
SecuriteInfo.com.Trojan.PWS.Stealer.32955.13532.30175
Size 210KB
Sample220727-31qdeaeeh3
SHA256 fca38c9e052eff6de41eda4caabf7bd31405cf29422357a4e0f579a4a6a6bf55
MD5 c11a78aa6157f3d6fd9ff8813c7ad26d
SHA1 34655b91177193db25a9d2602f826aff3af20644
SHA512 80ce45c663acba4ceb5053a41f8f0747b8491c015f027a3970d43ce39320c3cb3dd56ecb5700dbdc1885bd19fbee65d9118e9f81dc803f2814ab2d38b2e9621b
SSDEEP 3072:ccwbItyyAIEs+RxUlcDzdp4UrggVu6Cngr6VSUIZydjW/eDqm7U9UV:zwbXlUlUEUrbVuwr6QPymeDq6U
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.office-system.net
Port
587
Username
[email protected]
Password
Godgod123456789

Signatures

Agenttesla family
agenttesla

File Explorer

SecuriteInfo.com.Trojan.PWS.Stealer.32955.13532.30175

.exe 210KB

SecuriteInfo.com.Trojan.PWS.Stealer.32955.13532.30175

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 fca38c9e052eff6de41eda4caabf7bd31405cf29422357a4e0f579a4a6a6bf55
MD5 c11a78aa6157f3d6fd9ff8813c7ad26d
SHA1 34655b91177193db25a9d2602f826aff3af20644
SHA512 80ce45c663acba4ceb5053a41f8f0747b8491c015f027a3970d43ce39320c3cb3dd56ecb5700dbdc1885bd19fbee65d9118e9f81dc803f2814ab2d38b2e9621b
SSDEEP 3072:ccwbItyyAIEs+RxUlcDzdp4UrggVu6Cngr6VSUIZydjW/eDqm7U9UV:zwbXlUlUEUrbVuwr6QPymeDq6U
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

220638

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing