Behavioral task
behavioral1
Sample
3462044a90e354d9e153f9966b307d1b.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
3462044a90e354d9e153f9966b307d1b.exe
Resource
win10v2004-20231201-en
General
-
Target
3462044a90e354d9e153f9966b307d1b
-
Size
878KB
-
MD5
3462044a90e354d9e153f9966b307d1b
-
SHA1
61910a37c5efcf6da5438009d841a08e1efa2aca
-
SHA256
d0b93c8087ff0b354c937bf45dd5e6ca5ef84995b309180b3e1ddb1e70e6886c
-
SHA512
41584c92f7580a1ffefa88500a9609c601c0e46bdbfc270c074a68df770ebb6ba00da2b8ab7399f85c9531a26a2e8e9b8619fd0de5ddb123816f9fb6e011f32f
-
SSDEEP
12288:kf/r1h9dpW5ZCVnpHQDL38Dpq0XO7hbZXl4+9tWO9VKo4s6kQTYz7IP7r9r/+pph:kf/VW6VGUD02O/x4LkQTYz81q
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.clarisse.us - Port:
587 - Username:
[email protected] - Password:
d)9TY@Xe9f38fL
Signatures
-
AgentTesla payload 1 IoCs
resource yara_rule sample family_agenttesla -
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3462044a90e354d9e153f9966b307d1b
Files
-
3462044a90e354d9e153f9966b307d1b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ