General

  • Target

    2ffb5ab12548ae624d295f7e17a2f4115cfe1382d87cb548d6576efd546d7989.exe

  • Size

    169KB

  • MD5

    daa104b0dbbbac65317f8eda1f07f719

  • SHA1

    17c8dbde654d7afc752a11ab306461281ea2c9db

  • SHA256

    2ffb5ab12548ae624d295f7e17a2f4115cfe1382d87cb548d6576efd546d7989

  • SHA512

    2b97a73b7f88278cf77382105aafdcfbacbadb82a54b52c9cb0c038f5865718f64003692065b84d04e070a9c5364a59a812c52b8e64421d3968a37150d837f2d

  • SSDEEP

    3072:5bQHEP3KbiUTu3pjbIQUXsQYkzHs+Ne4D1IOouuc:tT4u3KQUtZNFxIO5

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6046588611:AAHngFJgBz0aLCEYl_UqtwxXWVphGujriz0/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ffb5ab12548ae624d295f7e17a2f4115cfe1382d87cb548d6576efd546d7989.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections