General

  • Target

    0769c4bf125251b748677d2478b6afe130b621505975f7e25e991852be56d0a4.exe

  • Size

    301KB

  • MD5

    0b4ba47af1e6344479bc6e7a3ea05377

  • SHA1

    2e8ae4d590e01df6ad8c1301ae711f440f176b16

  • SHA256

    0769c4bf125251b748677d2478b6afe130b621505975f7e25e991852be56d0a4

  • SHA512

    a6a22f1a0146eb533445680346bc197155e3d7ee7dd14fcbb22dea0e672b940e8b77ff27cae0aa84da09facb9074ceb36cf1e5c6ad5ca0e6866bcd471fed6be6

  • SSDEEP

    6144:BpfTPNUJy6VchcKaNSNnozBbN4jvy89eAlmc7Fb:/PSncjNoRqa80A

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.yandex.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    money123@@@

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0769c4bf125251b748677d2478b6afe130b621505975f7e25e991852be56d0a4.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections