Behavioral task
behavioral1
Sample
52532af5e0a37571e22adc3d4ad9a4a32a8b939bfad36f05342f0f1c7f5c02b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
52532af5e0a37571e22adc3d4ad9a4a32a8b939bfad36f05342f0f1c7f5c02b8.exe
Resource
win10v2004-20221111-en
General
-
Target
52532af5e0a37571e22adc3d4ad9a4a32a8b939bfad36f05342f0f1c7f5c02b8.exe
-
Size
168KB
-
MD5
83e12c3e05cc48b1d525be7d0a75d8ad
-
SHA1
88c0cc1fcffdf000a0784d8933992d22a4a860c8
-
SHA256
52532af5e0a37571e22adc3d4ad9a4a32a8b939bfad36f05342f0f1c7f5c02b8
-
SHA512
1e6c3b2fd138f58956490cb9d933993cbf46c7f061716622dae7a7eda322dab08c062a012459d20162d3b3387bd9aafd436b721111712ce4e00f88af4ea56e8a
-
SSDEEP
3072:Jj2fAZcNi2Pj/Nqvltv/iLgI7e8vL3l6SLgFU5xqvg5j/AHDk/Q/Ib:t2fwcNi2Pj/NqvldugIFh1yvg5gSQQ
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.cimesgroup.com - Port:
587 - Username:
[email protected] - Password:
7hhiLEYF4T - Email To:
[email protected]
Signatures
-
Agenttesla family
Files
-
52532af5e0a37571e22adc3d4ad9a4a32a8b939bfad36f05342f0f1c7f5c02b8.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ