Overview

overview

10

Static

static

10

31aa9a1b89...b6.exe

windows7-x64

31aa9a1b89...b6.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    c071c51fe156b750d0ab834fe244b211.bin

  • Size

    82KB

  • MD5

    19a5573f5af283909de8ca1a7b3230e3

  • SHA1

    d1a4921354673419cd12290f080d051a3a4b9f0e

  • SHA256

    bd4d55536c534967ab7e603643469c8446f14f9e83d3b03f2dde6a00d722632b

  • SHA512

    4e618e89b0274acc7efcfeafbdbb7bc5bd6cf7dd97047cba50ec5297b08cc8280006eba13c496ee0d4af21b5e45d46595ffc529e4934bf9958313fe8fadcdf28

  • SSDEEP

    1536:Ju3oSpDbQ1IA1kVxRTUaFVJqyCKOKEpPohMmFYYNkIyo4pQrIvNYfY5aAXuM1Bbp:Ju4SpXQ1GZTUakyC3pP+27o4pQUvN5Nt

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot2107727636:AAGtenJYFQWUHBz27lev7d_3slnNyCuUhxc/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c071c51fe156b750d0ab834fe244b211.bin
    .zip

    Password: infected

  • 31aa9a1b8971563f88b86da4d28fb79eb8bf88e43d0c3aedd9592837b4b602b6.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections