Overview

overview

10

Static

static

10

7127d8b400...f9.exe

windows7-x64

10

7127d8b400...f9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    76aff072b98cace8cdbf003952f25daf.bin

  • Size

    97KB

  • MD5

    f842691c173fb4032acb94dcdbec9192

  • SHA1

    dbcad5115fef164dd4de6d2705d390dded187071

  • SHA256

    8ff7037935c5d0a2347a1d7230746342330398a5dccf3f0524f6188b848a707c

  • SHA512

    bdec1caf0e3b3056eba6303cce5c7d1a91325e037e4d5869b9040ecf10f7bc17feeb0330560106abba0c1bcb98d9688d6fe521f9366874c70a220e0ac5e0fec8

  • SSDEEP

    3072:4e/EXpfEdmxU30VhJ+xl1cq+XdUkeK8ho6:P/EXpfED32J+xX+Xd/2

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6357247770:AAGbyRDxRktEpxbHHmPhg_ZPzNOrZ1YuUyE/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 76aff072b98cace8cdbf003952f25daf.bin
    .zip

    Password: infected

  • 7127d8b4003601f85a7e9d4db6eb8fae16f60734ed7697257d8a68ca476a52f9.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections