Behavioral task
behavioral1
Sample
d53dbe75a5f24c92bf54fa24fb1f354cadf3369134d6adc6670d669bdb65a519.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d53dbe75a5f24c92bf54fa24fb1f354cadf3369134d6adc6670d669bdb65a519.exe
Resource
win10v2004-20230220-en
General
-
Target
d53dbe75a5f24c92bf54fa24fb1f354cadf3369134d6adc6670d669bdb65a519.zip
-
Size
81KB
-
MD5
a4ed5d79196cbea3e6a063d1027f9466
-
SHA1
4ede64bf9fbc5cf44b23db2587a50bcb3abf855b
-
SHA256
a28058b5d7484eb247b986106458f8a3b1248342912e0a46ccd473323ffc3983
-
SHA512
f0f6048813447511339a90dbddcb9ee011bf393c8f14e62d7c0e0a2c3948823216efa98d104e5a0d3299cde1251a9951442122e6848b7bf31453fe9c1dc56c6a
-
SSDEEP
1536:kJfhNFp4LW3PS+lHph4wmH/4WltEzGo7m3GAXXj54J4NLFp5TQOF+8Bi:Q7Fp4ePNJnz7Uvj54GTxrE
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.1and1.es - Port:
587 - Username:
[email protected] - Password:
vanesalucia00 - Email To:
[email protected]
Signatures
-
Agenttesla family
Files
-
d53dbe75a5f24c92bf54fa24fb1f354cadf3369134d6adc6670d669bdb65a519.zip.zip
Password: infected
-
d53dbe75a5f24c92bf54fa24fb1f354cadf3369134d6adc6670d669bdb65a519.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ