agenttesla | 5bc9622e468f8c321d890a02e3ce7a1f2dd86c9c6bb29a38e050848616bcff0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bc9622e468f8c321d890a02e3ce7a1f2dd86c9c6bb29a38e050848616bcff0d
Size

236KB
MD5

8eb2097808669912d19d7bc2ff6d4296
SHA1

b6c19864c4cb9c5a956955acc72c8457f0d6032f
SHA256

5bc9622e468f8c321d890a02e3ce7a1f2dd86c9c6bb29a38e050848616bcff0d
SHA512

f70184c550ecc396a75fd68676504a0113f8d822094ef05d5aaa60f5b50a6cbba64703a58c2113e17038c51fdaea99c77f786f8986c5627be6f327e1268c6707
SSDEEP

6144:V3aqH8hnz+d+kk0k4d5zw7IBLEZ4RtTV1h:RH8hnz+kkk0kW54Z4/

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.amtechcards.com
Port:
587
Username:
[email protected]
Password:
]i[a(tUWlmp%
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bc9622e468f8c321d890a02e3ce7a1f2dd86c9c6bb29a38e050848616bcff0d

Files

5bc9622e468f8c321d890a02e3ce7a1f2dd86c9c6bb29a38e050848616bcff0d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ