Behavioral task
behavioral1
Sample
6b739fd75d1fc59a528641bdf04fca35ca991627ffae39f0e2ef7304784ce13d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6b739fd75d1fc59a528641bdf04fca35ca991627ffae39f0e2ef7304784ce13d.exe
Resource
win10v2004-20230220-en
General
-
Target
6b739fd75d1fc59a528641bdf04fca35ca991627ffae39f0e2ef7304784ce13d
-
Size
165KB
-
MD5
caf44fd31119d2a82a18878415e80645
-
SHA1
b96b7d3fe86cae362767addc380e7160aacadb70
-
SHA256
6b739fd75d1fc59a528641bdf04fca35ca991627ffae39f0e2ef7304784ce13d
-
SHA512
926f8e58bdcc50765d82b5d974f3d55f41b9cc26849b4cd70b3d9249e80120a8d80001eb3813c8c6721248592e646e8f6dd91a51930b62a6ae3374c3960bc6a7
-
SSDEEP
3072:qu+daD9D6dgHphfjcwix0ZSp1tzLa8EyrVeUxoiqbHGuA8nJHH2a+cwv:qu+dlgHpVjQx0ZSvdLfrD5qbHdAgtWa
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
smtp.servicesterminals.com - Port:
587 - Username:
[email protected] - Password:
zK2kveho - Email To:
[email protected]
Signatures
-
Agenttesla family
Files
-
6b739fd75d1fc59a528641bdf04fca35ca991627ffae39f0e2ef7304784ce13d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ