Overview

overview

10

Static

static

10

4ff8a522ef...c5.exe

windows7-x64

10

4ff8a522ef...c5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ff8a522ef000b82d57dfa14f4e9b04967e4240dc36a0c7c3e0c53834afcf0c5

  • Size

    237KB

  • MD5

    777d9708d2981116060c2978b3fc7e8b

  • SHA1

    b3013c2b4bfde33883ca8c74d89a5fd57cbe502f

  • SHA256

    4ff8a522ef000b82d57dfa14f4e9b04967e4240dc36a0c7c3e0c53834afcf0c5

  • SHA512

    c0a67763ab91781771133970758290e1158a474a758b446093ff2fe7678552abb4fee343728df75cd18ee3d1d08c5223c3c56c3cb24e5a595f325b11c6430f26

  • SSDEEP

    1536:IybBvGxbuRkuDw4Ij3S7pJyv8JF5VFmEQYd3ocp6fWmoNIN/TiSC/ltJkJWyxMJr:uyw4IjwsCVLQYdx6TT/TiSC6TMJs+pj

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://valvulasthermovalve.cl
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    LILKOOLL14!!

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ff8a522ef000b82d57dfa14f4e9b04967e4240dc36a0c7c3e0c53834afcf0c5
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections