General

  • Target

    31aa9a1b8971563f88b86da4d28fb79eb8bf88e43d0c3aedd9592837b4b602b6.exe

  • Size

    166KB

  • MD5

    c071c51fe156b750d0ab834fe244b211

  • SHA1

    317a4b869a6a92190fd77ff54e7fc286c621bcb5

  • SHA256

    31aa9a1b8971563f88b86da4d28fb79eb8bf88e43d0c3aedd9592837b4b602b6

  • SHA512

    b60c4867efc7fdb02b52f50a1e6249ec98f6009cc90e9a3a56760eebf9cae2c71db44640ce70c935430a4857ca9fdebc5c2433a5eb31f460fafdd02b7fe7614f

  • SSDEEP

    3072:1uy+MDhspZp26VS/53zYGDazIIBef5995wvakia1i6hlpNp:22/5cGDaMPf59Yvb79hHN

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot2107727636:AAGtenJYFQWUHBz27lev7d_3slnNyCuUhxc/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 31aa9a1b8971563f88b86da4d28fb79eb8bf88e43d0c3aedd9592837b4b602b6.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections