Behavioral task
behavioral1
Sample
92eb663b3bbcd78b4ae6cf54bb25a0a1d9815f7eb8468a7ea7185099ebc94ead.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
92eb663b3bbcd78b4ae6cf54bb25a0a1d9815f7eb8468a7ea7185099ebc94ead.exe
Resource
win10v2004-20230915-en
General
-
Target
92eb663b3bbcd78b4ae6cf54bb25a0a1d9815f7eb8468a7ea7185099ebc94ead.exe
-
Size
243KB
-
MD5
25a1350eb6df51b9c6b5e9d4a667044c
-
SHA1
10f044ccf5a34974fa52c4b778ead80c3f5e6a15
-
SHA256
92eb663b3bbcd78b4ae6cf54bb25a0a1d9815f7eb8468a7ea7185099ebc94ead
-
SHA512
82c699c65efcdc434b6a68ed7680eaaa568e4e04be45a2cf78c60369dae08af8de50ffbd143e638ce4b470e316a0e7dfb389139abb8a1d61d94606d2ef0a7992
-
SSDEEP
3072:yW+KFXMX5x6Vkgl79Oqrp3kgLeE0lnqjKTtc6EZS7EGkKs:KK+X5x6VzkgLeE09qGa6EZS+
Malware Config
Extracted
agenttesla
https://discord.com/api/webhooks/1154336927366000673/Jk4ELugqgK9y6Ed57PuyX4obahplOtOUADODcma5L3loioc7ts6dqrNHpG0Qenz1WPSo
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92eb663b3bbcd78b4ae6cf54bb25a0a1d9815f7eb8468a7ea7185099ebc94ead.exe
Files
-
92eb663b3bbcd78b4ae6cf54bb25a0a1d9815f7eb8468a7ea7185099ebc94ead.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ