General

  • Target

    1183cb4df753b4f9868980712e15d24f4b412c646e082ddf34405ec147b78781

  • Size

    235KB

  • MD5

    b2c1313a18030d6c01145c063edd0b31

  • SHA1

    fb1d34778e19786776c5f41877284547c9c62578

  • SHA256

    1183cb4df753b4f9868980712e15d24f4b412c646e082ddf34405ec147b78781

  • SHA512

    f0ec2ffbe63db18ebdc515419fa2b83a12d04a7415e4bb0f18fd7997b644b280b8048262686510ddcfd9899e217c78a987127bf11104402d5eb07d4fd06a50af

  • SSDEEP

    3072:qJDXnvfnbDRqe8GB5pB/d6zIp+BWC35MXysjdINQI:qJDXnvfnbDRqe8Av8Ip+BWCmyoCS

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6810390417:AAHjwAyQz8UrRablicQbUjQtjR2n8OgcL-g/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1183cb4df753b4f9868980712e15d24f4b412c646e082ddf34405ec147b78781
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections