Behavioral task
behavioral1
Sample
b0ab5156c1e5e7fc9f968b880dbf42704e440bab63d5cbaef8bf2df2670a427b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b0ab5156c1e5e7fc9f968b880dbf42704e440bab63d5cbaef8bf2df2670a427b.exe
Resource
win10v2004-20230220-en
General
-
Target
b0ab5156c1e5e7fc9f968b880dbf42704e440bab63d5cbaef8bf2df2670a427b.exe
-
Size
218KB
-
MD5
06d41ddeb56d013297b1193efaa05bb5
-
SHA1
84efcfb35ae417716e85a01c825cf853d9ae0db9
-
SHA256
b0ab5156c1e5e7fc9f968b880dbf42704e440bab63d5cbaef8bf2df2670a427b
-
SHA512
0a81878a6c3b8f14a0fe42c3320b8225d7cbf3d80f071e81462df1debbfe653938137f00c1fba63337ef435aa7c485bee3b0c1131a74e9b4467fde48e4b33da5
-
SSDEEP
6144:/RTetXqhWwKKHLGxGUTZbHKdiR7pjYwEIrnuz:gtXqB3HCx1R7pcvJz
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.rimiapparelsltd.com - Port:
587 - Username:
[email protected] - Password:
Everest10@ - Email To:
[email protected]
Signatures
-
Agenttesla family
Files
-
b0ab5156c1e5e7fc9f968b880dbf42704e440bab63d5cbaef8bf2df2670a427b.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ