Behavioral task
behavioral1
Sample
724b387b8762c245969c80ade0c3984d3ba47f5ca060308e12034f770195c45c.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
724b387b8762c245969c80ade0c3984d3ba47f5ca060308e12034f770195c45c.exe
Resource
win10v2004-20231023-en
General
-
Target
724b387b8762c245969c80ade0c3984d3ba47f5ca060308e12034f770195c45c.exe
-
Size
234KB
-
MD5
553711f3e7926ede10a14410f9b1805f
-
SHA1
0f91313c2ecd749d11ca8942fb5dba0100927c5b
-
SHA256
724b387b8762c245969c80ade0c3984d3ba47f5ca060308e12034f770195c45c
-
SHA512
5138bf2d1e7febd08476e82dc65d521e89eacf4b220382c4af875f609a17cd66fd1cbc965cc95004f45e7b66ab588084faaf3b689658826e9c3206c06ec19c61
-
SSDEEP
3072:B/yuyGCxRQfM7S3TbTluXaKvB/WCJhezd35yfzL7Pg:B/yuyGCxRQfMe3TbaNWCJUpuzLT
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.cpbgdigital.com - Port:
587 - Username:
[email protected] - Password:
@^fkCujt4bYL - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 724b387b8762c245969c80ade0c3984d3ba47f5ca060308e12034f770195c45c.exe
Files
-
724b387b8762c245969c80ade0c3984d3ba47f5ca060308e12034f770195c45c.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ