Behavioral task
behavioral1
Sample
8e85a6c7982dd6abb1c3e6d00c0157d30a9a1be51e79fe45c36ce34387c82a4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e85a6c7982dd6abb1c3e6d00c0157d30a9a1be51e79fe45c36ce34387c82a4d.exe
Resource
win10v2004-20221111-en
General
-
Target
8e85a6c7982dd6abb1c3e6d00c0157d30a9a1be51e79fe45c36ce34387c82a4d
-
Size
159KB
-
MD5
de0db943f703d92369e96510b6623efe
-
SHA1
6c7f0ba83740d6e3c04fe73f0e9ea9417241430b
-
SHA256
8e85a6c7982dd6abb1c3e6d00c0157d30a9a1be51e79fe45c36ce34387c82a4d
-
SHA512
04313025c92f99c5610d088e5fdf3a5681621db99d53a9d93af1c5b3f36b2e808c5199d6c1248ae402fa62f0954b113fd0b802b569d4f9532525113870a0b7c7
-
SSDEEP
3072:iwDfVPGGv4NnclURR6TAL4ObvTqMykqIhsOnAda/VvZ3My:iK0GgulURRydOjT9ykqIhsOAdadv
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.mbarieservicesltd.com - Port:
587 - Username:
[email protected] - Password:
VhDJ3dxynQAf - Email To:
[email protected]
Signatures
-
Agenttesla family
Files
-
8e85a6c7982dd6abb1c3e6d00c0157d30a9a1be51e79fe45c36ce34387c82a4d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ