General

  • Target

    4a32d33cc69e5e4f553a665a09f700acb2d3ac15a701b83e84a8360db72e632d

  • Size

    292KB

  • MD5

    4b680874d97c489b6c1c80875b00ed92

  • SHA1

    92f23b24c3d8e60bbc0468ba2396372a6e8048b6

  • SHA256

    4a32d33cc69e5e4f553a665a09f700acb2d3ac15a701b83e84a8360db72e632d

  • SHA512

    0ecccb90955476427f79f9ea7c529a42f79c0917b919da312d38a00576024ff7d005eedfb351920c5fc7dd7d9090b5aee8840b8b876882b7fd602fe0f2f33f16

  • SSDEEP

    6144:UPjqLMYo+J/Dyi4HZNAZRQ8YGTomS3kYTBbuoSTV:U2D2HZ2HbsNUoSTV

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.fernsturm.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    @Ranger1.,

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family

Files

  • 4a32d33cc69e5e4f553a665a09f700acb2d3ac15a701b83e84a8360db72e632d
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections