agenttesla | 1696260485547fb5cd4b2e409a5f2b481e0872813fce77298696697b77415fbc9579325465913[.]dat-decoded | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1696260485547fb5cd4b2e409a5f2b481e0872813fce77298696697b77415fbc9579325465913.dat-decoded
Size

164KB
MD5

a413cbf395fa31f26a7f234248248a8e
SHA1

4f09e352f0c764fa3e1df824c21bd96f86d13d75
SHA256

2c2d3f57062c12fdc05ff1fe2e0736064aba160941f4cde98078fbf032e98b65
SHA512

3ff0147e60387fbdf55ab7248de4f1d719662b9ae88a528169a12bc5eb3ce46d943fcf295fe0daba775fb2ec54a4a357891b95b86d20c2d83e6dbcadfad16893
SSDEEP

3072:tgXowImeif1K21WJJU4pMsixMSHqFvI9KR2ImTIUN9:t4K2sJ1p0MIqd1wVT7N

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.tecnowares.com
Port:
587
Username:
[email protected]
Password:
pY$WNuY3@@wed
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1696260485547fb5cd4b2e409a5f2b481e0872813fce77298696697b77415fbc9579325465913.dat-decoded

Files

1696260485547fb5cd4b2e409a5f2b481e0872813fce77298696697b77415fbc9579325465913.dat-decoded
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ