General

  • Target

    288e005a1b902e69f28792796b80d4f2

  • Size

    292KB

  • MD5

    288e005a1b902e69f28792796b80d4f2

  • SHA1

    f5c52820510094ce6734dac5ed2448d997eadba7

  • SHA256

    d6db633dee02b3869b13ab52832fd95ff1ea68276e34986aeb706e8bae90d7ea

  • SHA512

    efe3e0d8be4298c5acc31398eacb796b35729795a7db814e7827a8ddafcc37e8f08d5841a912c59ce3a74f6170afb445e7f33d6748131491532d9bb3119f6c5a

  • SSDEEP

    6144:eU8NrfkWPbkhHEv3sSd0DCxbSHXdzCdqb5OOa:eLscAvPUbSHXZOOa

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.psturyana.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    nPp^OJV1

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 288e005a1b902e69f28792796b80d4f2
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections