Overview

overview

10

Static

static

10

80e5a57fbd...fb.exe

windows7-x64

10

80e5a57fbd...fb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    80e5a57fbd2b8ab25047b246ad66d35befb3c266e40989abd84fc4f49a72e8fb.exe

  • Size

    164KB

  • MD5

    d8f961bb4257565724c3d849139617e7

  • SHA1

    b4fd8268581b1a3a2e42a80897336a3a8c7e8fcc

  • SHA256

    80e5a57fbd2b8ab25047b246ad66d35befb3c266e40989abd84fc4f49a72e8fb

  • SHA512

    e8e88d0d864374f290220998adea193c5b5feee9ff0ae95230208eb2e138929ae5d8afd4c2361679bf52cb88c60575a667dc88cd57e404696aff6ae8e3ad4850

  • SSDEEP

    3072:sWvgVuQs0bkjKOh2KYivLi43r1orKh99/lbcnnnP3fS1qoe:sW4VuQsrhIk73s29/lbcnPvS1

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://files.000webhost.com
  • Port:
    21
  • Username:
    tain00
  • Password:
    computer@2020

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 80e5a57fbd2b8ab25047b246ad66d35befb3c266e40989abd84fc4f49a72e8fb.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections