agenttesla | 41b13847d071c6ddafc523b2332dc3e7897caee432d0a42961ccf95f10486930 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41b13847d071c6ddafc523b2332dc3e7897caee432d0a42961ccf95f10486930
Size

264KB
MD5

c29837afc81a4e8f7b49be1600f9d1cf
SHA1

aa89a35187c415c16327489e95905a0adb6bdff4
SHA256

41b13847d071c6ddafc523b2332dc3e7897caee432d0a42961ccf95f10486930
SHA512

5200367e06f6037dca1cb665f13d5bdf395fba36bf62358c32a46db26ae55b5367881275bfd594e3bfa2500fb3e5981f66246a84fa2a3c6c6ad7cb4284a1ba64
SSDEEP

3072:Zn4UI8v+wkv08Llb69j+c0olVt5xgBDKg:Zn4UI8v+wkvTLlb64c0oveBm

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.outlook.com
Port:
587
Username:
[email protected]
Password:
Game2020
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b13847d071c6ddafc523b2332dc3e7897caee432d0a42961ccf95f10486930

Files

41b13847d071c6ddafc523b2332dc3e7897caee432d0a42961ccf95f10486930
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ