General
-
Target
done150.exe
-
Size
167KB
-
MD5
1635fa2d5bfbf230d818ed1792d5b788
-
SHA1
32b01fc85f30a9e4b376a33b970a6360890c41bd
-
SHA256
b1f121318392a948efdcaf8ada009ad948c9d2e9a5c0cee1b3e739447c585d75
-
SHA512
ca4a19048d8319423b071e5b1db52bee7a5066b39ee30cbde7de0e373eeef87304293ba0871fb324c30ab2cf3bd6d67eee9140c6d130931d8a7bcc849472d29d
-
SSDEEP
3072:jfYhGxyMyeB23rqePfhGtlTFd0vwd/hTs5J95pCD:jfGM/QGehssvwRQJ9z
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
smtp.yandex.com - Port:
587 - Username:
[email protected] - Password:
hizseivvsxwnpsxc - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
done150.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections