Behavioral task
behavioral1
Sample
648749114b1a7f198b44dba4261ea0ca4f6752d76bd1842f1b3f6429c7f2506f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
648749114b1a7f198b44dba4261ea0ca4f6752d76bd1842f1b3f6429c7f2506f.exe
Resource
win10v2004-20220812-en
General
-
Target
648749114b1a7f198b44dba4261ea0ca4f6752d76bd1842f1b3f6429c7f2506f
-
Size
196KB
-
MD5
583545ed70314bb191ffcafb5a686fb9
-
SHA1
4977b87e43a706353cb5161bf1d3512aa0938282
-
SHA256
648749114b1a7f198b44dba4261ea0ca4f6752d76bd1842f1b3f6429c7f2506f
-
SHA512
060a539fbb8ed39a8da423c1d0928b8db26670ee5ba22d9e2a9db42c460945f0f128779c27c9ed7635ad1481351a9322254a68262cfbac7012012fdff04c6684
-
SSDEEP
3072:TYFy9kJoyYmLOgPa4V+0LmYPUF7j4XFJL27uCibnYWH4rRKYnUp5:M5JO4t9PU1j4Vx0uCibn5HMRnn
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
smtp.gmail.com - Port:
587 - Username:
[email protected] - Password:
hnxqezadblabdsss
Signatures
-
Agenttesla family
Files
-
648749114b1a7f198b44dba4261ea0ca4f6752d76bd1842f1b3f6429c7f2506f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ