Overview

overview

10

Static

static

10

6865a97fdf...08.exe

windows7-x64

10

6865a97fdf...08.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6865a97fdf80736a014eef05467d29f0f19009860e964a07056cf38e10012908

  • Size

    249KB

  • MD5

    04e2ad46dd45e2a1427eb7acafce3caf

  • SHA1

    db31874eb01e192132457efa76064de524d3128f

  • SHA256

    6865a97fdf80736a014eef05467d29f0f19009860e964a07056cf38e10012908

  • SHA512

    46468644f7400d4556393f175585aa1ef85b5c0fa33420a31f5bd1886af3581ff4e3c15fa4b93e93b3fe9278151d798face601dcc346fe0a4a3e984153ec8f97

  • SSDEEP

    3072:yaGiGa/qaKyfzsZMQzxh97eKo8Pajf1jQGMsK5ASgbR5rUQQ:yaGiGa/qaKyfzsZMe7HovjfhDMsygb3

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6609066655:AAFvSlYuljpA1ReJkQXiHiJh0XH1Axk0H-A/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6865a97fdf80736a014eef05467d29f0f19009860e964a07056cf38e10012908
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections