agenttesla | 651a2ef1ba7d9c7c62811a59609a9d03[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
651a2ef1ba7d9c7c62811a59609a9d03.exe
Size 316KB
Sample231005-lcgmxsaa6x
SHA256 68bfc9ed3467e7772c67f3e8d73243b8221d6a99612ae9bf3046818ff414c6d7
MD5 651a2ef1ba7d9c7c62811a59609a9d03
SHA1 44c66dcbe2ff4fcba9c779c93c6d35d76d4f0481
SHA512 112b478a8411741ce1fcf79bfab55c51aea155fd281522c683a09e9a11c93445e265e8c439c4bd1099cb50f184cbea38137cd3d501972b4ad80d09c25fd18080
SSDEEP 6144:mDthOzj8VzK2UcTcN3Oc349uibAzgvjBf:mJk8kocdo9uibA8vjh
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
651a2ef1ba7d9c7c62811a59609a9d03.exe

File Explorer

651a2ef1ba7d9c7c62811a59609a9d03.exe

.exe 316KB

651a2ef1ba7d9c7c62811a59609a9d03.exe

IMPHASH 12115494f2c86ccfa8a7bf3471dfac33
SHA256 68bfc9ed3467e7772c67f3e8d73243b8221d6a99612ae9bf3046818ff414c6d7
MD5 651a2ef1ba7d9c7c62811a59609a9d03
SHA1 44c66dcbe2ff4fcba9c779c93c6d35d76d4f0481
SHA512 112b478a8411741ce1fcf79bfab55c51aea155fd281522c683a09e9a11c93445e265e8c439c4bd1099cb50f184cbea38137cd3d501972b4ad80d09c25fd18080
SSDEEP 6144:mDthOzj8VzK2UcTcN3Oc349uibAzgvjBf:mJk8kocdo9uibA8vjh
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6294

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SizeofResource GetCommandLineW VirtualAlloc FreeResource LockResource LoadResource FindResourceW ExitProcess GetModuleHandleW DecodePointer WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap LCMapStringW LocalFree GetLastError QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer GetStdHandle WriteFile GetModuleFileNameW GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW

shell32

CommandLineToArgvW

ole32

CoInitialize

oleaut32

SafeArrayDestroy VariantInit SysAllocString SafeArrayPutElement SafeArrayUnaccessData SafeArrayCreate SafeArrayCreateVector SafeArrayAccessData VariantClear

mscoree

CLRCreateInstance