Overview

overview

10

Static

static

10

5bddcbb927...fd.exe

windows7-x64

10

5bddcbb927...fd.exe

windows10-2004-x64

10

65e27a76da...c5.exe

windows7-x64

10

65e27a76da...c5.exe

windows10-2004-x64

10

7ac566649f...ae.exe

windows7-x64

10

7ac566649f...ae.exe

windows10-2004-x64

10

7cae9baa6b...bd.exe

windows7-x64

10

7cae9baa6b...bd.exe

windows10-2004-x64

10

d3c0f8d7e5...f7.exe

windows7-x64

10

d3c0f8d7e5...f7.exe

windows10-2004-x64

10

d9c9253f2b...5b.exe

windows7-x64

10

d9c9253f2b...5b.exe

windows10-2004-x64

10

fc37ae98eb...09.exe

windows7-x64

10

fc37ae98eb...09.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    agenttesla_bulk_test.zip

  • Size

    681KB

  • MD5

    9f68b9ef4dbc753476c8e9e43ed51946

  • SHA1

    fa9defb58c4178d4aa1fb32b376fff29ccc240cf

  • SHA256

    d5ef85ebebe3ff44feeb9775ff78e81598f7a276f309f40bb2589dcd6c3d1f73

  • SHA512

    c4c716908ee15c7ba5f86c4e14246d95abdace1cf9c50b8afd4af5e0bccc5f8046422b74fd3b9fb29ddd0af8ad75be035031d8f5e55afafd6690753252a0ad15

  • SSDEEP

    12288:oluAGJoeDVwkxeSmNAq3/wGWnhu9s7edADr0dLSBIleJ28rEIAuW83FU27+:MG95wkEaQoGcV4RNSEeJ2vF83FUZ

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1152136296676986931/IVXdXXa3ejZfpLp59Bre31C9l3NwdM4U-2xVK4bYlvjwK-6siBTQcMPZEZRKDoJtK86x

https://discord.com/api/webhooks/1153579890067640350/ARZfeIar3suCQHsLFn5_77FmZLqCZApTJ_p5KOReGIkX1w-C_brTG7T3ZU1EHmybPUbP

https://discord.com/api/webhooks/1153220874120482837/adoq7rVcI9vsHGkLVr_4KMCfwaNS39vllRpkDHEZzdlyGpgQ0hnNrogHZlXm-U3xbQt1

https://discordapp.com/api/webhooks/1153542142246006804/y2ecusetMOq7ROpPMjNkj2oJRm_CskSPWA7tuiZvu8D9q0tBgf4K8Og4xq8mh03jXxGu

https://discord.com/api/webhooks/1153223870891958314/4fjTdg6uWPR-Mfasd2z9A9lMK59UySWkNCvaFZXMHtU0FDbkkjIMF2XSDIeUY1fHd9R4

https://discord.com/api/webhooks/1151737072110010368/oULsZgCfbEOkkP-3xRtB8ZspMBtB4zI_WGsZN9XXV005aWUNMmMIxnuzoLIxokxlJUlN

https://discord.com/api/webhooks/1153331163096678490/cIL_freQTZBOdNnCkb6AkHkw6zC8Kx677XYGiNUbIi-4JpCXZpC9ctTFvp7YfNgDiv3j

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • agenttesla_bulk_test.zip
    .zip

    Password: infected

  • 5bddcbb9278d33d95600b0ff378f5f7fff986615ba1cb1ad4b538865e8c34afd
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 65e27a76da50e9f988bcf7cb142d24c5bc31dfd3f1b21012a7f655ddb1337cc5
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 7ac566649f88ff12127d3efa36fe4f16ce30efb840560194cc39fd487e860aae
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 7cae9baa6bae421e198634dbfe9bd7b873dcdd764fb2e68e21a89fe648be1bbd
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d3c0f8d7e5eff92fb6378a1ccc62c8aba3944d12ccaade18fda748c9a7f0ecf7
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d9c9253f2bff48f4033711d9376b1ce9e4d77f1dd35f3d835e32198cfd53905b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • fc37ae98ebce49b3abfa919860f5d563bf84cd398f772d955158ac45ba6adc09
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections