Resubmissions

22-09-2022 17:18

220922-vt9vgafger 10

22-09-2022 11:00

220922-m38prsfacj 10

General

  • Target

    afb480e4ad0324585f1bf3beec7b1b89729f2af125842dc2dab10565aa814abe.zip

  • Size

    93KB

  • MD5

    d02738477499840c7ef92cb549831a22

  • SHA1

    ddbcc645302d1a5cebed73baad72f031dc91399d

  • SHA256

    ceb436c89789a91625a8810acc1483e842905dfe876c615e8085dbc07546ae3f

  • SHA512

    998f37f3a8b741bff3a638f29df02b19109064393ce0f6e2d77139a939b8b019072f9b957a8940801247e6272a77753201d5f7f63bbb456965a59f8eb0105e39

  • SSDEEP

    1536:TewvANYrZgC0uHfqoFK8eZ5MstrLZOzAXlmcE9FGxUwnhOWOI51+zjD4EKLw2Y7k:TewvANmgC0OfDK8e4YRO0XlmNzenwWnb

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    %2B
  • Port:
    21
  • Username:
    application/x-www-form-urlencoded
  • Password:
    image/jpg
C2

p=

Signatures

Files

  • afb480e4ad0324585f1bf3beec7b1b89729f2af125842dc2dab10565aa814abe.zip
    .zip

    Password: infected

  • afb480e4ad0324585f1bf3beec7b1b89729f2af125842dc2dab10565aa814abe.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections