Overview

overview

10

Static

static

10

16dfa58446...09.exe

windows7-x64

10

16dfa58446...09.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    450a4ab336664ce75f68c7834800fcb8.bin

  • Size

    85KB

  • MD5

    d9458bad2c1c6dbce6afb6036bc90028

  • SHA1

    e118b3514624985f612e65eaae2625c2d88f9613

  • SHA256

    25904f22df6c31c8c6ad16836d00f05dc9ee66807b0d823bd62ace0485ab9e0b

  • SHA512

    fee2e281d3a1784452b8f97c76846764f846bafc2d168082a176735d6e3777f59f04110f3fd207344df0fc86efa658e0d2a1fb9a42aec2205ce18c09e9ef6ceb

  • SSDEEP

    1536:FWKhXS0QYSDH8ZyuKsuYEWjEwYf+ycZy8pINTe0wgh2BmY7qQc+IJ:PhXyV8ImJEuYzcZnsBTEB+L

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.atelierzolotas.gr
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    alibaba.com

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 450a4ab336664ce75f68c7834800fcb8.bin
    .zip

    Password: infected

  • 16dfa584469cb9749215b87fb90e69dd2e10e2cf7c8d0a18b075e330a3b21d09.exe
    .exe windows:4 windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections