Overview

overview

10

Static

static

10

d5588c6392...37.exe

windows7-x64

10

d5588c6392...37.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d5588c6392413a0562724482f936a68b48fbaa7ad7d72bf044480c85f1135937

  • Size

    234KB

  • MD5

    0dc9ef30a0a660f0ecd48e449fa6c36c

  • SHA1

    77b911e4bd22f3f238eb4ad3e6a4dd5c1f095440

  • SHA256

    d5588c6392413a0562724482f936a68b48fbaa7ad7d72bf044480c85f1135937

  • SHA512

    c3a5bed1f3e68c85b4c15245e39cb50918ab6030e6acef910114dcbf95399ccdc0de4bc658281c79460eef6e853095c4a97b16c9bf09de60f7106a5ea7fa73c9

  • SSDEEP

    3072:GZoOYVFOX3ujteKwUjdmhDU+VM67eZ7F5KcvkMxtMS:GZoVVFOX3ujteFUJR4M6CZ7HkM7

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6449872707:AAEGEf0h_DNZMBoPvXka5NOsj4a-gfldS5I/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d5588c6392413a0562724482f936a68b48fbaa7ad7d72bf044480c85f1135937
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections