agenttesla | 4f67d2e1350afce6dedf82172ac905fe12cfe1d043a27010d30d2f2f0eb5a6e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f67d2e1350afce6dedf82172ac905fe12cfe1d043a27010d30d2f2f0eb5a6e4
Size

238KB
MD5

3d7ee78cfe8f6b90c9607ac9faad1ea2
SHA1

bca2669b565071486bac770025a1792e7e5e12e1
SHA256

4f67d2e1350afce6dedf82172ac905fe12cfe1d043a27010d30d2f2f0eb5a6e4
SHA512

6cec7217e0f89fd30559185080a554f89077e5db28bbaa3ea20c2d8e41d51f08e7d37fe77a6abb4a58d22f8d335adbf6af39d7beadaa144dd2dcd259d1a4e3a4
SSDEEP

6144:q3aqH8hnz+d+kk0k4d5zw7IBLEZ4RtTV1h:eH8hnz+kkk0kW54Z4/

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.amtechcards.com
Port:
587
Username:
[email protected]
Password:
]i[a(tUWlmp%
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f67d2e1350afce6dedf82172ac905fe12cfe1d043a27010d30d2f2f0eb5a6e4

Files

4f67d2e1350afce6dedf82172ac905fe12cfe1d043a27010d30d2f2f0eb5a6e4
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ