Overview

overview

10

Static

static

10

1684991937...ed.exe

windows7-x64

10

1684991937...ed.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    16849919371e063b608d997678acf85079ec79638d51fb59bfd508c98800ceed8a8e4d16f2242.dat-decoded.exe

  • Size

    164KB

  • MD5

    5edd109d2160c17f787bbfcd4048c377

  • SHA1

    38bcfc163036392b2f34fc015a38330720759cf8

  • SHA256

    6c296b3c0eded366084694b19f503a3e55cde24e9cab6d152765e8779daf01d3

  • SHA512

    3bbedec480f8e59d909bd3b7b17439c3e19171a410cad5ec69ec9f05cdb3a928e50133b9e94dfe7f039ddcaa9947e39ab4e0ecc0c13fde5f46366eda79235011

  • SSDEEP

    3072:NRBRDIDePUe6cz10+BW3E8WjJGslTOY5CpPccDHYtCc+F5uk1kiOcxg:NRB2MPFZdBW3LWtDU0cdcMQYTx

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5883165495:AAHjjmpPTlM3AEJ2AlXf4AY12otIoNhTCdo/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16849919371e063b608d997678acf85079ec79638d51fb59bfd508c98800ceed8a8e4d16f2242.dat-decoded.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections