General

  • Target

    98c22c74f41003c443c1e26b72e3e1d4

  • Size

    216KB

  • MD5

    98c22c74f41003c443c1e26b72e3e1d4

  • SHA1

    0593cb3664926b9fe022c05d7a437ab83f73f6cc

  • SHA256

    48b05619f4c896877630fa73041518ff25a11d99fb4b12d937dfeba0612c37f8

  • SHA512

    52d4ba8bf52e48552916d8ab2aba27f7b30caec8f7b285201fa6f8415ceb5ecdc032d17db595efaa361ceb74925110e26f16e1cef44aba568721b90031e8cf3c

  • SSDEEP

    3072:K9Wrp3e8ZrtnhRm3LpUsbPCXm2OkuiYiw+KcniBKb7Aj5QT4cjn6FFUyt5T2/:K6nhY1UlXPOUwngSKQj5Q0cTWeO5T

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    mail.impressindia.net
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    iTE]4_=o~XA)

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 98c22c74f41003c443c1e26b72e3e1d4
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections