General

  • Target

    d0140724b4a56b7709d044f557d70bdefd4d75cbe329f6795731d9338b77fca9

  • Size

    250KB

  • MD5

    c026055f4cb715b6828c5369a084ea03

  • SHA1

    d37ff274c3db590df536fb2929dd777bfeb44043

  • SHA256

    d0140724b4a56b7709d044f557d70bdefd4d75cbe329f6795731d9338b77fca9

  • SHA512

    b619c30260ad065ea26a00227ccd8839b552abbd2d15e1b0c0fe5e4e4001bcab0e4fa3abeebc4736e62e184547820f795f58948f22aaacb401adc4d221dcc67a

  • SSDEEP

    6144:wqHbVBFpF8z9OTXj4zjZOKZZgiZaYN/flF:wqHbVBFpF8zkTXjbwVUY

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6791385945:AAEQbYw9pULLBF6wEr8EMZkwzl9NNcbdakU/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0140724b4a56b7709d044f557d70bdefd4d75cbe329f6795731d9338b77fca9
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections