Behavioral task
behavioral1
Sample
download.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
download.exe
Resource
win10v2004-20230915-en
General
-
Target
download.exe
-
Size
245KB
-
MD5
83d972ce4cd511472f81f65f0f09d8c4
-
SHA1
bf3dea7e9fb9628603bf5c86e4a10bb41aa94d89
-
SHA256
f18feeb5c75c4848990a31437d1b889d1ed0f48524cdecb29077459c7c267d42
-
SHA512
62f8a9f2d561c8cfc3c7a35f17df8c2ee2247b628132dbd3822f2dd6484ee9fb4511925b5e6f70f8aad5dfd535716b885a0c248901439961e327c7205e02d87e
-
SSDEEP
6144:bBT/4fQFzW/+p4WFu5QRiBlsU+uRXuNjk7qqyzp9GFE94I77t1gCpX7mxDpdv0p5:NT/jL47TRy
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
evantelamin.top - Port:
587 - Username:
[email protected] - Password:
X?)AzNk7,R~X - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource download.exe
Files
-
download.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ