General

  • Target

    cc658ef20e0e8a449f5e6028f8514db2d628f30d2d648cec718d69a1b61bd16e.exe

  • Size

    233KB

  • MD5

    8b42cc290dfba3830c3d57c96aebd242

  • SHA1

    0934ed2cf88e7c2f720a2a8c07158fee9a0eba41

  • SHA256

    cc658ef20e0e8a449f5e6028f8514db2d628f30d2d648cec718d69a1b61bd16e

  • SHA512

    13101479014c6e3af266e0afa54e2345df88f6e7cbe023788eee7c9b5c170432e6204af1a9b71b8aa64344ee3af8aff58dc68f11bbc408c82c1cb7b43bd33619

  • SSDEEP

    3072:+u7Xjnbe9Q43OAL+VbQ8bM+6Wv5u1jVqj:D7Xjnbe9Q43OAL+V1bMjWAjc

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.cefin.bg
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    #UuXy?6cIbL+

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc658ef20e0e8a449f5e6028f8514db2d628f30d2d648cec718d69a1b61bd16e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections