Behavioral task
behavioral1
Sample
fc3ce8c870e0d1de56fdf0959496b5b94d88eb5eea648627114a80b4dddb234d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fc3ce8c870e0d1de56fdf0959496b5b94d88eb5eea648627114a80b4dddb234d.exe
Resource
win10v2004-20230220-en
General
-
Target
fc3ce8c870e0d1de56fdf0959496b5b94d88eb5eea648627114a80b4dddb234d
-
Size
165KB
-
MD5
d9e0cec7763c55cf3f67b1afd26de7fa
-
SHA1
6533f4b9d3a927d90e2fceed10450cd9ad2818d0
-
SHA256
fc3ce8c870e0d1de56fdf0959496b5b94d88eb5eea648627114a80b4dddb234d
-
SHA512
fde4de7d15bd2fcffaa9508105cf7f285dbd504f6a878b48745a479a1c44443bcbc29cfe1f63cab14c1992d2b42de728a3668edb5bc7fb55ddfaa9ad77455335
-
SSDEEP
3072:9+xvqvHhtMS1zmk4K7N5y678BEP054KwukRXrcatDN/:sUvhGIyuJ91Wr613dN
Malware Config
Extracted
agenttesla
https://discord.com/api/webhooks/1074762549540683888/YJ88UnXmVY1k6zhxf92JhGlWNiZAHASwts9XZxU_g6itsFuSNcNqwq6M1kccvsBM57Cw
Signatures
-
Agenttesla family
Files
-
fc3ce8c870e0d1de56fdf0959496b5b94d88eb5eea648627114a80b4dddb234d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ