General

  • Target

    71769693e34bd0116c96d55e1ec5f96090d8c1d38f1e037a83effc9de785f52c

  • Size

    164KB

  • MD5

    f52ca7ec12ee4c905fd0c8888707076d

  • SHA1

    05a60c21dc8ada56b848dbf8487cf371a0d2cabd

  • SHA256

    71769693e34bd0116c96d55e1ec5f96090d8c1d38f1e037a83effc9de785f52c

  • SHA512

    c9af100df1e4e8285c0e5faea3e0ee2345829bbedc1846e39211e7bd94c57ffd7f105da0cac0206ebb750f7194b755334c649159765469c5006d5a63392cbc91

  • SSDEEP

    3072:ttNfVyEUVz1KlZwToif4pqRFrGOda+5ERhdQlI2jsv:GEOZAGULqHimER7AJY

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.valvulasthermovalve.cl
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    LILKOOLL14!!

Signatures

Files

  • 71769693e34bd0116c96d55e1ec5f96090d8c1d38f1e037a83effc9de785f52c
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections