General

  • Target

    9a157353e20d338997d5e016266bbd58.exe

  • Size

    210KB

  • MD5

    9a157353e20d338997d5e016266bbd58

  • SHA1

    9c20c9ddc9b2707990d267bbd59e8b6d3b46e642

  • SHA256

    104af60f7d2f1351535ad148b29ba12bb139d2af518417ce8455abcb17662ebd

  • SHA512

    b88ba8b90d61118c2435b6207af71c80ac5e3583e2f9ac1642500ac569f3896cd35182e3b9b7d96b028a48d488428f1b87495067a2ec5da7d776a02f7dc5159f

  • SSDEEP

    6144:IgwZP/U0qyAyHfJlJFNCoj0/aO+UrQJ7ghoFoVIj0XW4XYXjLpKi01jmXPr+h1Sa:IgwV/U0dNdj0WcYXjLn+1

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    %2B
  • Port:
    21
  • Username:
    application/x-www-form-urlencoded
  • Password:
    image/jpg
C2

p=

Signatures

Files

  • 9a157353e20d338997d5e016266bbd58.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections