General
-
Target
52ECC50F274667DEAF0F053375962ED32165C6298F32FAFC3F9418C449B4CF41
-
Size
126KB
-
MD5
a3929efeb402b4b3c9ddb58babd71bbe
-
SHA1
3f5b7d5f740cbc512ff9050e687ed69511380499
-
SHA256
52ecc50f274667deaf0f053375962ed32165c6298f32fafc3f9418c449b4cf41
-
SHA512
8dedaaf5149cf7b5f45ec057f3f508f7700075bcae23090b4fb3fc5507b472f4c25f2d469627c188c4ba98d79b89205e39b340f367d29b389debaeb1b134c039
-
SSDEEP
3072:MGT9N/S0zxL+XL3jumaW0jt1dRDJfUV6BY7LpjG:MSVS0zsL3ima5dR1fUO
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.holstonsurgical.com - Port:
587 - Username:
[email protected] - Password:
holstonsurgical@123$ - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
52ECC50F274667DEAF0F053375962ED32165C6298F32FAFC3F9418C449B4CF41
-
invoice..exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections