agenttesla | 3c4dea9627b74b6746664a05a98df0cca426a155602ae1c5596dff72102c7521[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c4dea9627b74b6746664a05a98df0cca426a155602ae1c5596dff72102c7521.exe
Size

243KB
MD5

ad2f66a51f7b24078eb056109fefcdfe
SHA1

c7f77ca35fc394a2a8a3678501ad67a4b5cb2284
SHA256

3c4dea9627b74b6746664a05a98df0cca426a155602ae1c5596dff72102c7521
SHA512

d7b5d91249ae514c3770ebdb1489076c8defb0f5bd8d63ba71a65fe79ae27f42eacdb4c627c28875164bd94f0c61151adb7989234afaf618899f70b666b0ce84
SSDEEP

3072:HLrOBNkY+ZNjHDXWozVkFc4n+3zz2jd+57S5pNC3FAqe:rYkrZNjHDXWoxkhnozEs7Sg3Kq

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mymobileorder.com
Port:
587
Username:
[email protected]
Password:
Grace@20233
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c4dea9627b74b6746664a05a98df0cca426a155602ae1c5596dff72102c7521.exe

Files

3c4dea9627b74b6746664a05a98df0cca426a155602ae1c5596dff72102c7521.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 240KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ