General

  • Target

    d968c05d4d6a03c81dc99c68274a6f5ed93fc090ef575d6c54abf9c88c779e77

  • Size

    216KB

  • MD5

    456d6148032f07553c3092467b70e763

  • SHA1

    4166ff30d831139a4d9ef32c65932e3414405b9b

  • SHA256

    d968c05d4d6a03c81dc99c68274a6f5ed93fc090ef575d6c54abf9c88c779e77

  • SHA512

    87ddb3725756529329cac1663a90b882b046cd79757c4be2fd589394531d7fb0de472ce97a8fde948e060ba40f6cbd92fbece78d35b8182dbe534cd8b316e96e

  • SSDEEP

    3072:c9Wtdd25FRpVFoQzz3L5W0UiMV913A1QuyhycY3m6vUfcvHkcJunSW0gBGCtUWBn:cmdNQzXbUJFARyf68gl1g4+U

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.yandex.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    graceofgod@amenn

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family

Files

  • d968c05d4d6a03c81dc99c68274a6f5ed93fc090ef575d6c54abf9c88c779e77
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections