General
-
Target
1688538007cd1046c3a550ba4.exe
-
Size
164KB
-
MD5
1fcdafd829aeca63d0367ed6bff4d883
-
SHA1
8f4d48c77b6e2334b8dc2a93a9626f7987fc548c
-
SHA256
900dfd325ef667b5ac55768bbc18db18e9dcfd309fc07b37c8c83796f7fd9ac5
-
SHA512
bf6c5f3917806ab7cc5366364d803cabf323daa71d5215d335fd5bcb0b9e120265fcd0beee07be8113e1c670353cdfd6ea94a793a0208c40d232ae3bce5e0f15
-
SSDEEP
3072:blfNMah/QQ/A7L1ulJvvhjD6lnhBwR1B2A0YIHwGKkbgdEeR2Z:r/QbBEJHclnK1BkY/xk0dh
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.hermosanairobi.com - Port:
587 - Username:
[email protected] - Password:
+efQ)lDLJF7899 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1688538007cd1046c3a550ba4.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections