agenttesla | 4a0d23817c22539eddd96c89e8125c35b45e7038c60f2a0be5e99c157aa59702 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a0d23817c22539eddd96c89e8125c35b45e7038c60f2a0be5e99c157aa59702
Size

240KB
MD5

0a11269d25419f79726cd9d3e95c7fbc
SHA1

f6e9cf499ec05da450719ee4cc848b877d64635a
SHA256

4a0d23817c22539eddd96c89e8125c35b45e7038c60f2a0be5e99c157aa59702
SHA512

382d8988e4610b6f125a600f2fc97a417ab8f22c9161ec9babdd82baec252e0a99faf9cf43976b088dd46f0d371c377746149940e9d9be96fc2cab8dbcd16dcd
SSDEEP

6144:9dYTBM1ICc3xF79pIFMEMbUjzGeE7b7nFueEDU:9dYNM1vc3xF79ABM6qxE

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.waterchem.com.tr
Port:
587
Username:
[email protected]
Password:
5-Pc!NJQQ3.A
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a0d23817c22539eddd96c89e8125c35b45e7038c60f2a0be5e99c157aa59702

Files

4a0d23817c22539eddd96c89e8125c35b45e7038c60f2a0be5e99c157aa59702
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ