Overview

overview

10

Static

static

10

9ed555c344...ef.exe

windows7-x64

10

9ed555c344...ef.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad0080738beb0f1c978ebd471e918ffe.bin

  • Size

    85KB

  • MD5

    6ffcfc4ebed4f9ad3f19d678c8308bdf

  • SHA1

    c8580df7bfb50db1bd2a04df5bd896f7b493c317

  • SHA256

    3cbc883918a38aab262afac43a9fc7b18341a357aa2ca2ae71b38414c0970ed4

  • SHA512

    2a9dea588802fcacfc91ee2c891ba2f73417dcbb3b20eb3b24b377270cdb0fa5d35533277d25826ea47406be198260194cdf52c54da6be069714340d7b372b45

  • SSDEEP

    1536:tGWYIaFMnTlpF72PEL9vY7b/5KXTCyXfZWBEtH9jkfJ7mYY+VlOwlU7Nn7n0zHE:tbYIaFMTlpF7vNNxXfeEBMvkZd70g

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6950818166:AAGEBpo3MFF3lkfI4C4iazv-HBoQWXpFREE/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad0080738beb0f1c978ebd471e918ffe.bin
    .zip

    Password: infected

  • 9ed555c344789d67c554ca9f0d159113a587f9986e30f981942707d6fe46ffef.exe
    .exe windows:4 windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections