General

  • Target

    download.exe

  • Size

    163KB

  • MD5

    da3751c09505c2977df9ccf91b1c1a8e

  • SHA1

    39a0819c2e998307b56c178894526ebf10082ef3

  • SHA256

    588963bfc7abcbd0d686ccec80b2bbb70ec2871a7b1195756aece780cee24113

  • SHA512

    f4660342d19fee7b76640e173479c6222b0afeb1cbb2f80556a7bed6e763b6ca6cadb6c7ab32c26b567b6449bb719c6c698d3a83f2fc827ab58f83f192a9040e

  • SSDEEP

    3072:YkTkDRbMLbHtnu0I/DsJhUwgA54DCch1qerD0F/aNvQFOrxTr5N:YkwDRbMLbHtc/ujguICcS6AyNIIrxT

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.papeleriaveneplast.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    IeP;CsmA%.3G

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • download.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections