General

  • Target

    78fef1005bd91842ecc953e93b9094a68ab7c74a8358c752f323c487ae4b8129

  • Size

    164KB

  • MD5

    d7270cbb724f1a2599617d9014192c59

  • SHA1

    bed471273ef73eac0456ee2ce2f1bcd10c2fb5eb

  • SHA256

    78fef1005bd91842ecc953e93b9094a68ab7c74a8358c752f323c487ae4b8129

  • SHA512

    1bbbfd941caabc232aa9d011c752ba454f401507270a48df99c0969ad4a52d89bc6a699bcbe8c9452f077b913cf03c68a8b1c49b457450738c4b93b1bf356f01

  • SSDEEP

    3072:b3aCmYcTJR1xhYzkkWWflGB+vh3DSp0fdahRSzOlF728h:XcNrXc1W7B4kWCgzEx

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.svetigeorgije.co.rs
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    4c5H&b2whkD9

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 78fef1005bd91842ecc953e93b9094a68ab7c74a8358c752f323c487ae4b8129
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections