Behavioral task
behavioral1
Sample
370aa8e99d8347708a134cd677295f86faaca3f084c543b2f64b67ef5eeec780.exe
Resource
win10v2004-20220812-en
General
-
Target
370aa8e99d8347708a134cd677295f86faaca3f084c543b2f64b67ef5eeec780
-
Size
218KB
-
MD5
4c6f58578488cb276a75b7045ab624cb
-
SHA1
c982469467c81a1c35643515efdab780bd36111a
-
SHA256
370aa8e99d8347708a134cd677295f86faaca3f084c543b2f64b67ef5eeec780
-
SHA512
816989945b35a2a4c76b4f0140122173c3437d12d9b1f1c49f5fb0c64fdc85efaa68854546553ac37740f1665c258ec436b536ef86e65e6d56d08612aac00ea5
-
SSDEEP
6144:OmaeZIUy3UNmW3AlI9jAMRrIT/qVkSrRZU:npDyS1HraqicU
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
smtp.calmahogar.com - Port:
587 - Username:
[email protected] - Password:
Analucas1000 - Email To:
[email protected]
Signatures
-
Agenttesla family
Files
-
370aa8e99d8347708a134cd677295f86faaca3f084c543b2f64b67ef5eeec780.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ