Behavioral task
behavioral1
Sample
aac69257da45858aa1a7457a934625a228ee83504c8ee874bd0341cc6c282560.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aac69257da45858aa1a7457a934625a228ee83504c8ee874bd0341cc6c282560.exe
Resource
win10v2004-20220812-en
General
-
Target
aac69257da45858aa1a7457a934625a228ee83504c8ee874bd0341cc6c282560.exe
-
Size
164KB
-
MD5
b24ed43146a0279c1fe931f2ced3f276
-
SHA1
561d1f5de85dc29b89f8574e70518170583f8f4d
-
SHA256
aac69257da45858aa1a7457a934625a228ee83504c8ee874bd0341cc6c282560
-
SHA512
9b9a7b63fe56956972c9546e9cec6fa5fe4ffb8c80fc98de2acd7d2fe977531243207aa5f06a312e617dd395ec05392f3ee4950c22b8fee8846b9b1e29b024e0
-
SSDEEP
3072:GQgND1K1YSVjDJqCj8C6MTbqMUPlYE4jdfTvV7CODJD:XhVjlSC6Oe2LjdfTtukJ
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.veectero.com - Port:
587 - Username:
[email protected] - Password:
TevR]J,YJ6Oj - Email To:
[email protected]
Signatures
-
Agenttesla family
Files
-
aac69257da45858aa1a7457a934625a228ee83504c8ee874bd0341cc6c282560.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ