General

  • Target

    agentTesla_maybe_85_results.zip

  • Size

    8.2MB

  • MD5

    150acb0eaf6d2fbc072eaecb7facb2e5

  • SHA1

    63e9f29121249f23524f468fdfa9d298489fa9e9

  • SHA256

    43fb2ac8cd90279d1a4d55970510e30586f0ae7d8ca99e2569792a7160f472a4

  • SHA512

    1461b827328974a5a5a0248703f8d24f0e3b7566d981a6e60a8da4ad0ac51afb41d57787b1a25108050608e2402e848dfd6c5e2f9aeb6043dd3f83e6dabe6669

  • SSDEEP

    196608:jV2FGqI8jUMTis2LPJdEArcqdJQjDTESotUhyh34riU7x+:jMEl6+1XrNdJmDTEu+orF7I

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.cvgunawanplastik.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    OcIFe7FAiAO3
C2

https://api.telegram.org/bot6027094622:AAEZaK53bi-mjYC-JB2HDLU-zgFQIRMlkDE/

https://discord.com/api/webhooks/1150363626331451392/diQm3_-LAtuDqv52znxS979lWgZku3L6w_1YxVEt-0J336JdLcEM-R02NLCvYjDtnmBt

https://api.telegram.org/bot6611314758:AAGHJIA8l39bb6nc4czEcEnmTwdPEefvIpw/

https://api.telegram.org/bot6317317454:AAFQQFrf5JUZqsq156w8lOSJCUWwXYCjhaM/

https://discord.com/api/webhooks/1145970037304344606/AsEAtLwNVLMbys2JAZ1QNXr3OHTVxdqwdcF7w2Iz9TI8GEd8Wwj1jO58clSxqcG4u1g_

https://discord.com/api/webhooks/1133291620918382632/dqE_masvBaWgRzB59nggrkJBKoBvmOr6eW_j0AXdmxr8iUJKxaehQyz1TL6QQaDldmii

https://api.telegram.org/bot6345758726:AAHPSwN6mqm3uVDSbe-WsPGGFfg9MdQ5s-I/

https://api.telegram.org/bot6150575626:AAHpE9c3ETZP17P9GlpcOiMFC26P5vpRWxM/

https://discordapp.com/api/webhooks/1151736280481275954/-cWVVtMV6DDO5Frngy8Hw6Yg-3vUt8Aim3cgeGjoFBtezbpylfwU8mkPNZLGWzsIkYXJ

https://api.telegram.org/bot6408943220:AAG8hou2uFE7KkcOsrHNbNgPiCdaTTMvrX8/

https://api.telegram.org/bot6621488441:AAGMoeNgKO3D-0xogkkt5ih-t985o2sqqNs/

https://api.telegram.org/bot6442525124:AAHRn6nhiRLKe3Gt6C3jTMT10aqLs3yLV90/

https://discord.com/api/webhooks/1148873999472926800/wwwwTb56w7-mPZ_91sRquBPQehaMNQScrLdpW9Vf9d1ImjhMCywFpo7Y4f-f-Hwf2oD8

https://discordapp.com/api/webhooks/1141171534019436636/rsmn69Lcmg35Ga7bqVUGtuetk3b-HNiKLnmDMzvt91gHtESYIARmGI9pQQxxg2F5Q3mM

https://discordapp.com/api/webhooks/1150569545115893760/CjsiQWjSoCFkLk8IsGwaVU7lHuAInmY-6JL0nAOwy87AleYMNbqTZCoNvto3BexNyX68

https://discord.com/api/webhooks/1150504726962647050/THqFlNLkhMso6vGcDeZibodDuV-dXvitE8cLmgt6uXXGYmo3J0kgOzNvaJD3jT1YvYP3

https://api.telegram.org/bot6370641198:AAGVR88A8TbK5U_aO70pSYz0e-WNhTseH6M/

https://discord.com/api/webhooks/1135840424859291780/V-0hn2BLhBxs5lbVd7TpE9uBVTQunQxL6lrff4gbNWJqdWf14yU37Zp4g1OO7C8FOEK4

https://api.telegram.org/bot6475492981:AAGbQdUfD1YeE_Z637dDBtbn4_WE4_wc1VI/

https://discordapp.com/api/webhooks/1150898463375101952/npLD7Nih4_vVDTeN374y-SgpXTr6JxQCLBVf4SEYNLaDaFiYY3j72jBFZlmsQ3kGcsvx

Signatures

  • Agenttesla family
  • Unsigned PE 85 IoCs

    Checks for missing Authenticode signature.

Files

  • agentTesla_maybe_85_results.zip
    .zip

    Password: infected

  • 0d4a4260986ba6a593be6869ecbb7f302f860b4fb68255ee7ad3f2716ae0d7a4
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 0de25252f312735c0a26f7ac7a27cc8a51bfcdd900fc2e8d0a8b65013988e7e9
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 112f00306db8babb1c10980c11bb3324d3a598dd3e4d76b45b48edfbec48854a
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 118a34bf096f5b9ea16c31de288793192ed4bc413ee8f50198eb7df7f5cf8f0e
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 146f7c98ee50fd6022a139ec822b4a50b906fe141695c3bd479f3d90e3ecbe15
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 16a976bb432be2baaaa0f6d32dbcbb00b823746a35561e3e8708bf0312515ed4
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 17d374210ab665bff4abd342a9e54635f90481f9371b3d6aabca860bdbef7706
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 187384376b7726d570b5eba0d5314d43ea23d0fcdcaa72cfb1f8877580e4cd50
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 1a41302c041856d88ac470f964a874fc89c33b2fe7a3312f5720a01a66f09f1c
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 1ab5337bd3b76b84686c2aa616eb7e9639608a702be70da1a566128d4e36147d
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 1f0035845553e0069e22c4f16f058d537b0571339c9df9d8926f6edb67426f35
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 20ee6aa728dee4381f4a9e1cb68f2881c1cf49d433bc831b1522eb610e47c636
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 29fe6fff0874c8fdf094427fb99d3308d5e24528d788aae87b9f3b00bb70c93a
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 2a39b0b1adaf927a0ea6898da6eb77736713ee6185731a9f9a060f097705a184
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 2bb9e94737d0ef78b974ec601779bb2efd30ecde734f8640ad4e0e1d86efe97b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 308f90718012b047a2ee3b2ae76a16dddb657537dbd61e2a43ee2bb17725c6a0
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 32b95644a9ffe1c860dc3626fae73c7576de484476ce721b0865c0d8a93622a0
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 33b8648f67e3735ba82a7ae93c94680b9d1676214e44b3f3c5e44e1ebcf95299
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 3479a61e5df7c0f82d1392647da45b9d7078a4349e4b57e7076fa607b0f757e1
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 34cffb752ed7c3c21668ae30c2d24159ce479b26600a0506430b3a02bf814a52
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 3a97be528a2e9c892ad40865a97efec10333ad678be2aebe653fdcfbc1e505bc
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 405f204a0f233ddffb6984a37c30803b1e2877aea0e3a8ea74e308752a5e0fad
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 43f88b88e4e15400600d26a6bb19b4bae118c004dd75e6782d9cd16b7277854b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 4cff820ecb03098379ab638f5b56c3ab60513d927bbe09a7e8d2e75e75ba08fa
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 4f5b113c066852294595eae7175262f227f93f43bd709413ba82838eefb0c3fc
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 54df537c392c1eb689ecdbc50435b4ae8d26214f09b0d758ca886c7c608e5be8
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 5acd6f1b4ca37eda3e0a51b1a0431d82a421834887f79170ba8cdc585748a12c
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 5bddcbb9278d33d95600b0ff378f5f7fff986615ba1cb1ad4b538865e8c34afd
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 5c19d49626511a144b7d73ed111952cd5c9ed79ebb93347b78b753733fa17003
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 60af682b7e56dec78cce3ebd93b43b4ce6f85a9842c48dbab9d9282b7fec1d9b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 60c5ef3af7a3b790a403a31630ce8c27a43d21727823f6e010cbbdf2ea0e0a35
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 63423d06c77c3526d9820f5caeebb4ddf986c89d39ef56698b8ac0eb28b0cccd
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 65e27a76da50e9f988bcf7cb142d24c5bc31dfd3f1b21012a7f655ddb1337cc5
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 66b041d100fa542b7cd6770242d90189952c724e92f24609a7d5f9a9d43c1830
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 6a41af11cfbe01403198b7b6dec0ea1f51ea851fbcc71f1e8bdcb2a353b65412
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 6d77d5a103439701f62301a640447eae7a8fd0a48b7a6e23ed47b1bf02c17b89
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 6fca0cc791b0beccdb8eee1883974c9842a08f3edf6af558680368ebad69a506
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 7127d8b4003601f85a7e9d4db6eb8fae16f60734ed7697257d8a68ca476a52f9
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 73d782dc28a38a6e4ee9680f3caee329106a4927433cb0b39837a6ab078f4065
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 79e433ea8ad39bc3d9fc8c7290b4ceed500281d8ee0a5739ef9a7e3015388064
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 7ac566649f88ff12127d3efa36fe4f16ce30efb840560194cc39fd487e860aae
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 7cae9baa6bae421e198634dbfe9bd7b873dcdd764fb2e68e21a89fe648be1bbd
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 7d5021ed24bc3bb6b5b029d0ab5ed36fccfe1e8511bbd90e4e3d3021f084de6b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 7f2ce177a386c4702f9cefc501c41fafa818323a42b45cdc68f7fe365644a3ef
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 83cc9c4fec8f02105a5fc2a0854a0e7c7964d49d1b717cc31fdeba8525059e0a
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 91970dd848a42a1df4d798ab3a8e49fa3632b89637c2a0780bf37f6553bca91e
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 93e0b49ba883386f4aa0903e5086d001565c1c6ccd28897b24b326139600b2df
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 950f6e9d72c2968b9139375a0c8a6c65a8df2eab98879114293ae447ec0ad579
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 95dd113d2239a754fd3e2a8314429df25ae396aeeed43029292df04e830338f6
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 999c8e9cd08980e7af54ff2b7f40591ac37d81b7fc4470cba70f40925707b684
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 9c4ca913f311967f3e34bcb1bc2db41915d5ceb9b3b6165de8854913124ec3ff
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 9d20eabc91ae98403179116356bf8ee33b61c16dc5ded8a0fdc9a2bef44fd472
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 9ed966687e6219eb65f951d738006be8c20223db090212a35ee44b336cc1a2de
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • a3fa4673cd6c6efd251f3feed41ef88aa1721ba61d9a93936bdb75581e27033c
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • a645509dfc38de301048514cb6dcc0a5900b0162848b37f857c262b6b9de6075
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • a957401d332c850cd26b4d526251e1c37304946b28243f165bc9c48a0ff0af8e
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • b412458728b0c47c4ca1fb1eb6d4a99f752857ea83f5be07842936a641ad2cc6
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • b765dc89e4c26090cda45c7b50f2e6367bf33a4ea9aaabb6360908603632b3af
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bcb8fa0446a7d52e8bf88ba29faf124ac5ca677b3806aef9ca738855900a8672
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • c1fe8d3badc688c0a05257a8286549248e31915ec69c0025485ab2a63b8a243a
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • c5b726402d9ab379a66d4cc3236f971edc3eb16951d0999ffc5b7b117714543b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • cb2f1dc8a293bcdc724d776948feb47289896b1ea76bda4500de1483383279d7
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ccaeea59c0a7db1fd32814772a8a683c0b8d32cbe02214eac8f5d338b0576bd8
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d16462832fc40981a65dbfb90cd6886c6b60185c9ea83f0c96ea7bf463430f90
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d3c0f8d7e5eff92fb6378a1ccc62c8aba3944d12ccaade18fda748c9a7f0ecf7
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d43fb23dc98239df82f9c9b8c8935f3d3222eaed80bbf7a64737d79c8385f6df
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d963f7bb5f33b85387b27c90413d27d5a810d5727b2860522a7b3fffa9afe4c0
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d9c9253f2bff48f4033711d9376b1ce9e4d77f1dd35f3d835e32198cfd53905b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dcaa3d1d6cf4c21b65498d7a2720e8d7c313dfa699cd162f1d2624ac40b5b23d
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dfc091425ac76ddbbcf1f0859cc1faf689bd6141b947115f9e7c2fc898270559
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • e094490b16494354c1332782d00b85cb21512ac58935d6e11faf8a015cbe7086
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • e479268915c1929ff1016e3bf9a5203ea5ab6475d89f5fcb4a1512d106f2caae
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • e5da9ecb7c72b39e7ae54d6abc896012ab04a19b1b2da997a843e8b167f80c18
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • e656599f00a605767d59c30d48bab4837c561317dab260084aec115d84e3915d
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • e8f0db565edc47843e5ac9750b53b93e0d9d3dec51fcf0ba9368342e6bfc4359
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ec6611fea9635a686e95a3f1fe226d624c7f4ae3c69c432b1ab9c720d7746a9b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ec6699793cc1fd02dc94366bcc4051b7c54228489bec09ed0b8a63f3bf4f79af
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ee3126ca31a8d48b8bb63964d87788244da3bec19a31b11c29c82bfc56b12c41
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • eee101d8fb3953337c07e7de4a2b25693423722677bd4590428de4a8e37fa1cf
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • f294476af52a54d317743b608f7c5fa3ca9a3dad695bc4166ca561b40c556c22
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • f3af165cbfded91726190f5c9982852381ad1ac1ffe961b4c915f0254171d944
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • f99a0257cc349edbb4b1153b30b65a30706e8fe7bd1c72e53872b32b172c2dc4
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • fc08ab59267b999159f4399bc6d41204946a9f5a27cc38c5fe3b7d07d4f07c11
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • fc37ae98ebce49b3abfa919860f5d563bf84cd398f772d955158ac45ba6adc09
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • fddf39bac09c38759ad30c2b52cfd8fbc11dc4b263bfbb054808bee627b14684
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections