General
-
Target
dcb94887a042aa4a28eef86d4aedd7695ef47cb545ff6dc71e9ac18544b945aa
-
Size
86KB
-
MD5
182580bb2063b02291bbb4fd806c1968
-
SHA1
7a7e84fe2417b2d2a4fccd0dfe732a88bde92d30
-
SHA256
dcb94887a042aa4a28eef86d4aedd7695ef47cb545ff6dc71e9ac18544b945aa
-
SHA512
558dc7951e80147602f3e839905523ba014580fd8280a88fb1dc2a863bf9c1aa6b0b357a347db86a7984f41f0a6e41ed4bdc5a38b303cba2a904420127bf6138
-
SSDEEP
1536:foiv8ECG/dtOkAY3ETYNyuJ7/lAbhdnf3YOvcn0PDUHRuK6wzPI8DRuarg:fTtrcY3ETYNyuEVf3Y3nQDUHL6wzPI82
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.ahlada.com - Port:
587 - Username:
[email protected] - Password:
21rY$9U}48j] - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
dcb94887a042aa4a28eef86d4aedd7695ef47cb545ff6dc71e9ac18544b945aa
-
Swift copy of USD 15945.75..exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections