agenttesla | 0x0001000000022e43-184[.]dat | Triage

Submit
Reports

Overview

overview

Static

static

0x00010000...84.exe

windows7-x64

0x00010000...84.exe

windows10-2004-x64

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0x0001000000022e43-184.exe

Resource

win7-20220812-en

agenttesla collection keylogger spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

0x0001000000022e43-184.exe

Resource

win10v2004-20220901-en

agenttesla collection keylogger spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

General

Target

0x0001000000022e43-184.dat
Size

218KB
MD5

1c2deef5513a27fccfda1a23349a1b52
SHA1

3c30f1fb04b31218159d91d0d12bb69d2ce02ed3
SHA256

725baa7bbaefbd802f854af8b3402aef4565945df88cb7d10320daa9512ea472
SHA512

a3b2dceb99933766452b7a5d8f204d3f517bcec091fd159541fbe54780fb94b4b4ce331bb98f15ef654432d92debb808b6b437d69d00b4019959031eae5506e4
SSDEEP

6144:h2tCd7y+AVFUWTpwX4O1xeuu0H81KsM0yr4am:E4VAVJYu0eN7um

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5171883538:AAEyFWuNh68SJNNpkDCQbviRgrklZA3K4Qs/

Signatures

Agenttesla family
agenttesla

Files

0x0001000000022e43-184.dat
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy