Overview

overview

10

Static

static

10

PHLIP.exe

windows7-x64

10

PHLIP.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    invoice.img

  • Size

    1.2MB

  • MD5

    296b1fe195d75e21d8f75879667fd79f

  • SHA1

    5e8dcfd0b0eb49c33bc14744739800248dacb839

  • SHA256

    ba8fb64ee7e200c684ba3af150c229fe2a18d7489ab6959bd279d6c9ca2e4f3f

  • SHA512

    edb4b5532bba4c5a678c369992d07ed9d1fc084b420dd3af4d0940a2fa5b629ea79cf5bac79154d4569c175fb35a0acad0bd68cf8ac1f38e5f8773c2a04a180c

  • SSDEEP

    3072:gX99Tm92ve2nNOss1s1TAgxwuE45ZW8LY6aVBdnRbVMp:gXe2NnYs1TZZ8cIn

Score
10/10
agenttesla

Malware Config

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • invoice.img
    .iso
  • PHLIP.EXE
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections