General
-
Target
Unconfirme389399.crdownload
-
Size
82KB
-
MD5
4582b20b00d02c4c787c4f185ca70168
-
SHA1
f142b6cf9576652a7ce0bedb4d3d77c3ab5124b8
-
SHA256
76267d70c11b7dedc0753e4f863f348a5708897e2ddfaa103a44a8ee3d66a178
-
SHA512
d3c00844b7cb15f90ffda9a2f20d8e1b6ad4f434c89e6eb7c863020415979559d16708a70b11a3676efa30c64b9f2612625df1e8a2d0fadea0c7d93a3614a4d4
-
SSDEEP
1536:0gEYHPieUUcdoNTCC/tot0K6mcyng6wMeeYL+dstwsQyUQ2CrveaNx3CoJ3:0gEYH6e7c81Vot0K6mcyngdMeeQtwsPx
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
smtp.yandex.com - Port:
587 - Username:
[email protected] - Password:
hizseivvsxwnpsxc - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Unconfirme389399.crdownload
-
done.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections