agenttesla | 1[.]bin[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1.bin.zip
Size

168KB
MD5

ccd1f2f9cf4d5a726588f05ad8f973bf
SHA1

c41623c6f4d5c3eb5cbcf4a269f3fc06f5383c28
SHA256

bb3167924a5576e7b920d9f7976452b90c6c2674f08e63b0ba658d49eaec20ac
SHA512

0eeb207465da07d10f8d1679a8c0a575dcc2075ee7d21e40f975723aa95dbda92266bd03026bbd3b0b04e1442e126b9df82e9a4d6ea5f656889e2c45ba7fda5d
SSDEEP

3072:ss46cMsE+JDdjIREZeGGNTW9HGM8AWuXYaTycY8bZwdSRl35o:sB6cM4pmKv18RYyuw0V

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.yandex.com
Port:
587
Username:
[email protected]
Password:
ubduipymcemperot
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1.bin.zip

Files

1.bin.zip
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ