General

  • Target

    download.exe

  • Size

    163KB

  • MD5

    fde1998a4f91b01722de069c5496560b

  • SHA1

    1cb01d36f19e0317843ffa8936e4aced4c63d61d

  • SHA256

    0ace5259a5f3de5bfd71221aac959b8054bc31018aac425aa440aa4fe451ebb8

  • SHA512

    506ab8a7a0240c0c071288c8c7465cbc048eac0f87d08ae5a8883100b20e0324f40020d433f488df47d3449d1f51a866bfbcfd57fa548f5275aed2d7e155ca3e

  • SSDEEP

    3072:K70cnZBhtu/9mIkoEgqEKJikXAvvqKcO7xEoCp501gkA/jz7d6:K70cnZBhtuwkEWyiPa4nXDA/X

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.aktivos.cl
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    6eBS[U_l-x4$

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • download.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections