agenttesla | a7d8310d7c0f84675e04bd7c1acfa4aff42a13240faaf323c71fa651be2a1d3c[.]exe

General

Target
a7d8310d7c0f84675e04bd7c1acfa4aff42a13240faaf323c71fa651be2a1d3c.exe
Size 247KB
Sample230905-qthnrsff6v
SHA256 a7d8310d7c0f84675e04bd7c1acfa4aff42a13240faaf323c71fa651be2a1d3c
MD5 16e42bb66f06e9471e198069e335c8cd
SHA1 e70a03c133b263b1abe1fb68d9fd963ba6f50218
SHA512 6c08e61fbe8cb026e4c53895b89850a47bc6ffce82ef351e0b36b423c410f49a5ccc65522effc473ec5164075945c161bb75c7c40a5c063631d029e6beedb6fb
SSDEEP 3072:cqD67qz5xiWpcI0q0mvbSpFnRDmsOv5fA55:cqDWqlw0cIR0s+F8sOvG5
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.asainsaatmakina.com.tr
Port
587
Username
[email protected]
Password
asa2021
Email to
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7d8310d7c0f84675e04bd7c1acfa4aff42a13240faaf323c71fa651be2a1d3c.exe

File Explorer

a7d8310d7c0f84675e04bd7c1acfa4aff42a13240faaf323c71fa651be2a1d3c.exe

.exe 247KB

a7d8310d7c0f84675e04bd7c1acfa4aff42a13240faaf323c71fa651be2a1d3c.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a7d8310d7c0f84675e04bd7c1acfa4aff42a13240faaf323c71fa651be2a1d3c
MD5 16e42bb66f06e9471e198069e335c8cd
SHA1 e70a03c133b263b1abe1fb68d9fd963ba6f50218
SHA512 6c08e61fbe8cb026e4c53895b89850a47bc6ffce82ef351e0b36b423c410f49a5ccc65522effc473ec5164075945c161bb75c7c40a5c063631d029e6beedb6fb
SSDEEP 3072:cqD67qz5xiWpcI0q0mvbSpFnRDmsOv5fA55:cqDWqlw0cIR0s+F8sOvG5
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

258046

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing