General
-
Target
valsfiles.exe
-
Size
166KB
-
MD5
690d2b2f0b54d9877ec4648d39425a74
-
SHA1
721ac8ab5e3b75a27d152f0d83dba88c116340a3
-
SHA256
446a41ebc92233be1db08937470225a3d0cdc07c7f1ffff5e52011d78caba17c
-
SHA512
9f87294cad98abf9d374d6ce93173b9e0625c9af25eda3a025fc411fb75b424a27acc7d0dcc780e49bc8d6a36c5fc7c0c5af67540ada591c2add0ba64e9e8958
-
SSDEEP
3072:VEduJp9aXy+suBKtZrs3+NmPyv1pteosC8w9X7FP3O:VSC+4gX4vQw9LJ3
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.npmt-eg.com - Port:
587 - Username:
[email protected] - Password:
shady@123456789 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
valsfiles.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections