agenttesla | afb480e4ad0324585f1bf3beec7b1b89729f2af125842dc2dab10565aa814abe[.]zip

General

Target
afb480e4ad0324585f1bf3beec7b1b89729f2af125842dc2dab10565aa814abe.zip
Size 93KB
Sample220922-vt9vgafger
SHA256 ceb436c89789a91625a8810acc1483e842905dfe876c615e8085dbc07546ae3f
MD5 d02738477499840c7ef92cb549831a22
SHA1 ddbcc645302d1a5cebed73baad72f031dc91399d
SHA512 998f37f3a8b741bff3a638f29df02b19109064393ce0f6e2d77139a939b8b019072f9b957a8940801247e6272a77753201d5f7f63bbb456965a59f8eb0105e39
SSDEEP 1536:TewvANYrZgC0uHfqoFK8eZ5MstrLZOzAXlmcE9FGxUwnhOWOI51+zjD4EKLw2Y7k:TewvANmgC0OfDK8e4YRO0XlmNzenwWnb
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1884223853:AAFLYXw5-3W9k1k0nY-fyJeUEh7dhx5xk78/

Signatures

Agenttesla family
agenttesla

File Explorer

afb480e4ad0324585f1bf3beec7b1b89729f2af125842dc2dab10565aa814abe.zip

.zip 93KB
afb480e4ad0324585f1bf3beec7b1b89729f2af125842dc2dab10565aa814abe.exe

.exe 209KB

afb480e4ad0324585f1bf3beec7b1b89729f2af125842dc2dab10565aa814abe.zip

SHA256 ceb436c89789a91625a8810acc1483e842905dfe876c615e8085dbc07546ae3f
MD5 d02738477499840c7ef92cb549831a22
SHA1 ddbcc645302d1a5cebed73baad72f031dc91399d
SHA512 998f37f3a8b741bff3a638f29df02b19109064393ce0f6e2d77139a939b8b019072f9b957a8940801247e6272a77753201d5f7f63bbb456965a59f8eb0105e39
SSDEEP 1536:TewvANYrZgC0uHfqoFK8eZ5MstrLZOzAXlmcE9FGxUwnhOWOI51+zjD4EKLw2Y7k:TewvANmgC0OfDK8e4YRO0XlmNzenwWnb
MD5 SHA1 SHA512 SSDEEP

Password

infected

afb480e4ad0324585f1bf3beec7b1b89729f2af125842dc2dab10565aa814abe.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 afb480e4ad0324585f1bf3beec7b1b89729f2af125842dc2dab10565aa814abe
MD5 ad41c36bff05858a722e1a2ec86b12c2
SHA1 0ee3c514dfd440fb9b89300eeae38b65b2a0e547
SHA512 85fcc657ec9f62c4b1899ba66745acc26c473898ca9ab3fa2a819ac562030836177e30b789956525a852905c98be11e283034b0f0809d8018226ce8d0496b00c
SSDEEP 6144:w1hKe+BFESYjGEfJ+wCHUhWfEJAp4lkhap6DjPiIDeAmrvxOQe:w1Z+BFESYd4LEO3B
MD5 SHA1 SHA512 SSDEEP

windows x86

Password

infected

Minor OS version

Major OS version

Entry point

219534

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Resubmissions

Sharing