Behavioral task
behavioral1
Sample
b8dd7b9ca5bc4a5dc2da8608803207c0ea49fc264667bc0c12d58b435b7667b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b8dd7b9ca5bc4a5dc2da8608803207c0ea49fc264667bc0c12d58b435b7667b8.exe
Resource
win10v2004-20220812-en
General
-
Target
b8dd7b9ca5bc4a5dc2da8608803207c0ea49fc264667bc0c12d58b435b7667b8
-
Size
159KB
-
MD5
1a5b33fa7e1078ea0ccde2ba7b9386e5
-
SHA1
8092b642d1536817be4e81d8f6a37276c4cee5cb
-
SHA256
b8dd7b9ca5bc4a5dc2da8608803207c0ea49fc264667bc0c12d58b435b7667b8
-
SHA512
ea29f5c0d51d8daad2e66cd54f6138ffc05b3731db0a17fc10ccdc53d3d6cf039c6baeecb410498a1d3c11b4c8096dc61079a0180d0cb03024b47d74b0e23113
-
SSDEEP
3072:1wDfV6GGv4NnclURR6TswKVsfvlrQWuuHacS5IMf34fXvL3M5:1KtGgulURRys1sfvlrQWuuHacS5Fv4/v
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.mbarieservicesltd.com - Port:
587 - Username:
[email protected] - Password:
U)3*{*3X(9vr - Email To:
[email protected]
Signatures
-
Agenttesla family
Files
-
b8dd7b9ca5bc4a5dc2da8608803207c0ea49fc264667bc0c12d58b435b7667b8.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ