agenttesla | a26bff8b5c724f1bc557738407ee9aaf587200740a1092e90f4f6ee0677a5602-cleaned[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a26bff8b5c724f1bc557738407ee9aaf587200740a1092e90f4f6ee0677a5602-cleaned.exe
Size

243KB
MD5

f513f1d8fec93c4d7b9395d94e3dc0ec
SHA1

0a45284f53728bb35c7c41831c30079e750a3b67
SHA256

d9e05d342186af62e3cf6ae550d5d0cbbc76d77bc8fd82a0b3933c07aedd87d7
SHA512

5e0f36a720780ba41b8c84d948b56235d4faa2026341e4db0453d31f1c73f62de48f2c1551c32954d61286ab84248821b2339d098175ce2e6fb16a4e890e68dd
SSDEEP

6144:doeAfCETJlEI8FHk2xUMc6VRmvEg4GSfTzXpe+:donzlwrNLv5

Score

10^/10

agenttesla

Malware Config

Signatures

AgentTesla payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

Files

a26bff8b5c724f1bc557738407ee9aaf587200740a1092e90f4f6ee0677a5602-cleaned.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ