Overview

overview

10

Static

static

10

xKaSZLLbDI...rf.exe

windows7-x64

10

xKaSZLLbDI...rf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xKaSZLLbDICqMBAcPJhCTslrsAUoXfnEFrf.exe

  • Size

    214KB

  • MD5

    36bd05e59f6a73cde67245428c43466e

  • SHA1

    b10d41b2a69986894978dc1cfc5329d493fa27c7

  • SHA256

    dec571b8aec70f2c629e6231bf7f7c2962954ffc186db5b2f8e3eabfc45f11f5

  • SHA512

    3eba141711684bfbc6b3a2ba4a528a06141704a63f56a95610167414fd744fa357edde42b253fa5a7276d383797df262a0441d7d2cde9ac4e7f700d790ca9a17

  • SSDEEP

    3072:0GWEVfkf9iHSkcxJ6lA9Us/y63a8z5R6mpmATXNCsIfrqap8iIPdHwSqGCywtWps:0ISk4JAsUp65Gm7LkppVGdQSrfUW

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.gettoner.com.mx/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    fedxunited543@

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla

Files

  • xKaSZLLbDICqMBAcPJhCTslrsAUoXfnEFrf.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections