General
-
Target
a2199d918ef827f77727696dcf0e4445
-
Size
216KB
-
MD5
a2199d918ef827f77727696dcf0e4445
-
SHA1
99358d52da99ebc5ad7f913876df03a4484d943a
-
SHA256
c89106c744162fa0d1597b7ffd3242eeb0bee930c02664f31f3569e98559cda3
-
SHA512
f102a371af95cf9ca232075b6ba51fa18688fa182c758e3aa9c40d732157c3f7cc2447973b2838b27f06c861f26a41276114ccb60ef5214557ed91fe46dcb52f
-
SSDEEP
3072:dGWNUbDHHRg2hQDQ29nwzPqUcfyliUiCCXhymffbcv5/MShxeKKjIMSQEK5y4zHq:ditzPOnUk0m3FDKZ1QEMyCHvSU
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.elmlogistica.com - Port:
587 - Username:
[email protected] - Password:
m.vera20 - Email To:
[email protected]
Signatures
-
AgentTesla payload 1 IoCs
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a2199d918ef827f77727696dcf0e4445
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections