General
-
Target
80c76073187068990d79269484424d1b54dc647ab27c4198088fb69bf2050446
-
Size
346KB
-
MD5
d1d37a98787b2fe0220754b09cf3f208
-
SHA1
155cafaeb7821c2021b49dfbe777e159a2deb5bc
-
SHA256
80c76073187068990d79269484424d1b54dc647ab27c4198088fb69bf2050446
-
SHA512
ab2bfb8b7ff1755c68a710b17fb334d1a64b175d8dbeb163643d4884145a56ea6215674ecd9df3500f8b942b29c74864577f413d9265d7f05a1bdf2f27af9929
-
SSDEEP
6144:W70RDJaMMUTTXr3DyeCTRu+J5iEvAbE2aw4uay:U0RDJaMMUTTXr3DXClEEvjKz
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.oripam.xyz - Port:
587 - Username:
[email protected] - Password:
231Father@ - Email To:
[email protected]
Extracted
Family
asyncrat
Version
0.5.8
Botnet
Default
C2
139.84.229.159:2017
Mutex
jhT6lZT93vW5
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Agenttesla family
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
80c76073187068990d79269484424d1b54dc647ab27c4198088fb69bf2050446
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections