Behavioral task
behavioral1
Sample
2cee2222462acf332ae250bd8c9a087ba2378e7d2c7d602a36009687775fa92f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2cee2222462acf332ae250bd8c9a087ba2378e7d2c7d602a36009687775fa92f.exe
Resource
win10v2004-20230220-en
General
-
Target
2cee2222462acf332ae250bd8c9a087ba2378e7d2c7d602a36009687775fa92f.exe
-
Size
213KB
-
MD5
b6387c9af37f3042e5346855e93332fd
-
SHA1
ecdd19e73aaecc3a219a555027f8b7379ac6197f
-
SHA256
2cee2222462acf332ae250bd8c9a087ba2378e7d2c7d602a36009687775fa92f
-
SHA512
e9b5db3f5af868da8c6ab027e7b018e281ce247c5ef3db995227c71ef822bee5b179c6be610fd9ac9f4f890b95097cce3b80eddc647e78972e44a82b62f4368c
-
SSDEEP
6144:XVA9qmaXU/Qsxm/NPyS2XS7J5aAYf4Xi/xp:X6cmaeQsxm/NPyS2Xuy4A
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
smtp.valtronics-ae.com - Port:
587 - Username:
[email protected] - Password:
DhdXcLr4
Signatures
-
AgentTesla payload 1 IoCs
resource yara_rule sample family_agenttesla -
Agenttesla family
Files
-
2cee2222462acf332ae250bd8c9a087ba2378e7d2c7d602a36009687775fa92f.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ