General

  • Target

    download.exe

  • Size

    163KB

  • MD5

    c6bbafd04b4ea3523f5dd3de0f174c3e

  • SHA1

    e1acf1b6d234e4c5b38560ab5f20320fe69c7b00

  • SHA256

    b96b91a64f2d6d146a2c6be801cd89080faaabfab37d502302ddde930fa86e7a

  • SHA512

    ddd187750b93afee0ef5e01a0b3cb97a61caa7a02f1d6c5d7b977c859622084b081e887bb6046a9b65e71bf04d07068385b9b105af9eedc83e757d5f8e677716

  • SSDEEP

    3072:IHqeuAcqJ0Lu031ABEO5I+fVhhuL3Y7OhV/lNOpKdEkQqAFT:UqsJ0LFlMfIwh+NvNIKakLw

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.solucionesmexico.mx
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    dGG^ZYIxX5!B

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • download.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections