Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    at_yara_test_triage_11_samples.zip

  • Size

    1.1MB

  • MD5

    f704882b6ab5594111189a63bfdc0c1e

  • SHA1

    8013a2e5316f99869c8df0983537a84b9dd064ea

  • SHA256

    ce8d55abbbd169d0fab3a291ea483cffc08c51da8210725e0cdbcb426c59eb04

  • SHA512

    8d10da64f91355c0fa0a5fe0d94d1242406fde615edec23e1b269ad8420b2009feac4ed5150d824ada418e0d8d80e3bd41c1fa1e07c8f0048d16a693c78b6997

  • SSDEEP

    24576:WZdbNbu5mZ08cEMaIMh0LzA8NZjq2Hw6ICVD2y9mrG:wbNbTZ0AMq0PAIk2HLBsrG

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6317317454:AAFQQFrf5JUZqsq156w8lOSJCUWwXYCjhaM/

https://discord.com/api/webhooks/1152136296676986931/IVXdXXa3ejZfpLp59Bre31C9l3NwdM4U-2xVK4bYlvjwK-6siBTQcMPZEZRKDoJtK86x

https://discordapp.com/api/webhooks/1147567034830434314/bBP9_QrpVjC0IgaRlVL5rCHS1SsTuGSgNeEUI5ZqtnlOQ9CGuwF_676FAyKdneWbiamg

https://discord.com/api/webhooks/1153579890067640350/ARZfeIar3suCQHsLFn5_77FmZLqCZApTJ_p5KOReGIkX1w-C_brTG7T3ZU1EHmybPUbP

https://api.telegram.org/bot6158061222:AAGNygizG-Xj58HoSNR_TcFFsMLQBL_ySFM/

https://discordapp.com/api/webhooks/1153542142246006804/y2ecusetMOq7ROpPMjNkj2oJRm_CskSPWA7tuiZvu8D9q0tBgf4K8Og4xq8mh03jXxGu

https://discord.com/api/webhooks/1149079996992847934/6XfxcaxZ9VCk0TxGfB5Nk1y2dYZAo7reNxNVEjrcwcw95NklH3YKaHz-fDhpIzim1leN

https://discord.com/api/webhooks/1153223870891958314/4fjTdg6uWPR-Mfasd2z9A9lMK59UySWkNCvaFZXMHtU0FDbkkjIMF2XSDIeUY1fHd9R4

https://discord.com/api/webhooks/1151737072110010368/oULsZgCfbEOkkP-3xRtB8ZspMBtB4zI_WGsZN9XXV005aWUNMmMIxnuzoLIxokxlJUlN

https://api.telegram.org/bot6543832281:AAF0O-sB2JuhhWieylcwLs9yQGWcvpyk_5Y/

https://api.telegram.org/bot6454394730:AAGgFQQoYOheiUtQpndUMtI4qKuZRF8EXWA/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • at_yara_test_triage_11_samples.zip
    .zip

    Password: infected

  • 146f7c98ee50fd6022a139ec822b4a50b906fe141695c3bd479f3d90e3ecbe15
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 5bddcbb9278d33d95600b0ff378f5f7fff986615ba1cb1ad4b538865e8c34afd
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 60af682b7e56dec78cce3ebd93b43b4ce6f85a9842c48dbab9d9282b7fec1d9b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 65e27a76da50e9f988bcf7cb142d24c5bc31dfd3f1b21012a7f655ddb1337cc5
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 6d77d5a103439701f62301a640447eae7a8fd0a48b7a6e23ed47b1bf02c17b89
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 7cae9baa6bae421e198634dbfe9bd7b873dcdd764fb2e68e21a89fe648be1bbd
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d3a1736a244936b62c3c8a18f1aa65f73db25405d0faee867704493798eb9d52
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d3c0f8d7e5eff92fb6378a1ccc62c8aba3944d12ccaade18fda748c9a7f0ecf7
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d9c9253f2bff48f4033711d9376b1ce9e4d77f1dd35f3d835e32198cfd53905b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ec6611fea9635a686e95a3f1fe226d624c7f4ae3c69c432b1ab9c720d7746a9b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • eee101d8fb3953337c07e7de4a2b25693423722677bd4590428de4a8e37fa1cf
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections