Overview

overview

10

Static

static

10

d0e7c2c205...f9.exe

windows7-x64

10

d0e7c2c205...f9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d0e7c2c2051f19458270d09a15886fe99c945bfaeb8d01484159184c575d80f9.exe

  • Size

    245KB

  • MD5

    96f80dfd54296588296f07749e5c2d8d

  • SHA1

    5deaf09d9535a8e1565ebbc9f49d346ba3687ab7

  • SHA256

    d0e7c2c2051f19458270d09a15886fe99c945bfaeb8d01484159184c575d80f9

  • SHA512

    46854b76b2e08d4872312bcff64c4aad71f2048e69040c590f0a53588721f724f8b39afdffdc895763c73b034fb91503533d928ff59bf4f50ba8219e580156e6

  • SSDEEP

    3072:eW6zu7fc2qGi2JUihltdL9Klrxd5PPGc13SDFW4a5ae0e3x4W:eWxfc2qGi2JUihy13SDRe0i

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
    agenttesla
  • Detect packed .NET executables. Mostly AgentTeslaV4. 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion 1 IoCs
  • Detects executables referencing Windows vault credential objects. Observed in infostealers 1 IoCs
  • Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers 1 IoCs
  • Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
  • Detects executables referencing many file transfer clients. Observed in information stealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0e7c2c2051f19458270d09a15886fe99c945bfaeb8d01484159184c575d80f9.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections