Resubmissions

15/02/2023, 15:50

230215-s9zy4acf37 10

15/02/2023, 15:47

230215-s8cgeacf24 10

General

  • Target

    Copia del pagamento-PDF.bin.zip

  • Size

    80KB

  • MD5

    e0350756efecc93792c55606ef87f56f

  • SHA1

    8f2f7c7c81edf041f42a08f1dfc815f855a64155

  • SHA256

    8d87ed47c50a05418d425c0947c02992f4a447ac1117f484960a8a6a8ccf1beb

  • SHA512

    8e017928ef0dc61c1aa0554141e4583b70eefc066dba45b82b11513e6c141ccf9eb686eb038e27d7c3f98de3085d28305f582453e22a5347c9d96d030c91e4e0

  • SSDEEP

    1536:PGd+W0icc8h/mEF3U4J05gsYwy/Ce/M6Cy38BkoqLlhoOO:PGdRvozfls3y/Ce/0y38BVqXoOO

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5249845718:AAGAU-0wsEoqm32Ml21Y0Irz58kvd5j9Gss/

Signatures

Files

  • Copia del pagamento-PDF.bin.zip
    .zip

    Password: infected

  • Copia del pagamento-PDF.bin
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections