General

  • Target

    1b445f23-00f0-45e1-88dc-dc32ffa69b18.exe

  • Size

    240KB

  • MD5

    450a4ab336664ce75f68c7834800fcb8

  • SHA1

    981571f6e46d00bfadf9e88a1e780766c321a8ac

  • SHA256

    16dfa584469cb9749215b87fb90e69dd2e10e2cf7c8d0a18b075e330a3b21d09

  • SHA512

    17edf46c32c8df85380fbfec7b4c5b399875b28b10b960418dcac4147b66df8457dacb3e66d046f170a5bec85c8a39ada9b6d09c133868c3b8291c1dd87165fa

  • SSDEEP

    3072:CdA67f9xtpdnNVtf9IXSHwRRODpzfEmYFDwu5LCK+9GR:Ca67f9xtpdnNVtf9ICHwRROoFDwNKCG

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.atelierzolotas.gr
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    alibaba.com

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b445f23-00f0-45e1-88dc-dc32ffa69b18.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections