Behavioral task
behavioral1
Sample
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b.exe
Resource
win10v2004-20221111-en
General
-
Target
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b
-
Size
196KB
-
MD5
79614b62d3bba7ecbd5bbf52853a19af
-
SHA1
494e94c830fa9a7860f2d834042d0c19ea863476
-
SHA256
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b
-
SHA512
209bf7592d45a0f14af549ea2b40f7e6824d67c29670dbc5751273b87895694838cd28eb29ad50c56f048790d6545150c38996d246551539c7d51032e01075d3
-
SSDEEP
3072:wJ89MLHabeiLOr4KYgpvpmx5UFkpydpvqJAAj3ITKvJmnw7MIrup2:xKLCKPa5UepydpiJAAj3bJB7lr
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://ftp.cleaningagent.xyz - Port:
21 - Username:
[email protected] - Password:
9L4dBJBZ,kIQ
Signatures
-
Agenttesla family
Files
-
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ