General

  • Target

    NEAS.2d84bf5c07a7ef4e67565eb38180ae60.exe

  • Size

    383KB

  • MD5

    2d84bf5c07a7ef4e67565eb38180ae60

  • SHA1

    a3a5155e32e13508a04dc2b914c088270523d5ef

  • SHA256

    c51fa17f765d4e3124680c536bf2a5d3264b291550823ed576b82de2e3332c20

  • SHA512

    30a92cb3ac4b1f0bfb567cbbc78a21d62542d931aa2816d32c8dac09fb18f135b72c6a9b5971bc471c66711589e641fcd783c04cf460c9aac24fec036f9a279e

  • SSDEEP

    6144:KemlS3OzPFZi/bBlwqq4aNoc/ILOCgCB19GFx7bhomTV7oLqvwgG:KeB3oP0bz84aK/gromTV7uq4gG

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    mail.delhicambridgeschool.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    information@123@

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2d84bf5c07a7ef4e67565eb38180ae60.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections