Overview

overview

10

Static

static

10

1684922305...36.exe

windows7-x64

10

1684922305...36.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1684922305b139f902786f8d978c345bae0ed7593e106fdd098d67e7e4cc687db6a96f4131636.dat-decoded

  • Size

    216KB

  • MD5

    ba49b2344c4b7e799d958bd2d4b01ead

  • SHA1

    31802cc42b0ebbb687fb455825ced47d272fc27c

  • SHA256

    5e52ce02a1297d4d91d07304349eb8c353d9b5ca0c031cadd451975580e2ffea

  • SHA512

    dc2437dfb40ec55f0b383c5e8cf71133f5a68064669da43ae5d2341d564a3b01102643afc2eb8ddde6376d48b282388e5cb4127d8a01852dcb327cebd7e390db

  • SSDEEP

    3072:kGWK2dJVJRUacy6d/wCK4UsJPVxFdIy4TTALyYvL+aSoKHN9k38CezGgWROm7Uhd:k5UacyHeUAxvI5iDgA3kSgWw+Uh

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1977970812:AAHd8pA2REAwdAB_6eJ-9nZj90oz8OYGjrI/sendDocument

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1684922305b139f902786f8d978c345bae0ed7593e106fdd098d67e7e4cc687db6a96f4131636.dat-decoded
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections