General

  • Target

    70ba294c979969951e1fc7c4558b314c

  • Size

    217KB

  • MD5

    70ba294c979969951e1fc7c4558b314c

  • SHA1

    c06d6b78497c31093f605f0811f06a6a88aa0f24

  • SHA256

    3bb3b3feebc0a819f9d2b37a95682c3c61b593fa202ed6939d02beb5e6c0c12c

  • SHA512

    9547805746a14f1fbb83743280ba964bff3aa48da47212c75499b40c2bb15bfa5f033a5486528cd7bfc08ed8e1c2f8b324537766a6ea90583032da300f1f6f3b

  • SSDEEP

    3072:V9WjTmZPtEwtOgnpeWUs2sOlKvY8uO6Tt5Iev7CfK9rawxUEynVWi1TteOftUGQV:VXtOOVU9lqYTzH2fKEVESVRZZVUGK

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    mail.impressindia.net
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    mofia123

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 70ba294c979969951e1fc7c4558b314c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections