agenttesla | 9968a0eda39573ffc6e9ed8f1d6ead0c4490349301593a1b5a1f9ece87848be1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9968a0eda39573ffc6e9ed8f1d6ead0c4490349301593a1b5a1f9ece87848be1
Size

236KB
MD5

c9ffd1139984034e3c99dcf75ec582fd
SHA1

6b080e44c80435c81a7a4680fbcfdc4d7c93e750
SHA256

9968a0eda39573ffc6e9ed8f1d6ead0c4490349301593a1b5a1f9ece87848be1
SHA512

45d2c9a8c51b40b000fe0f85c9cee1e1705d210cca69cb74a83a9986a02463673d3ebd40337e564c296baed5ca599ca9d60679dd30ecc78fde6ab6d7d01267ad
SSDEEP

3072:Pynx2BZRZxzp7oO0NMsbyj3Sqgt3Upbhued4ABZsqMX57nbpafi:Knx2BZRZx97ANMuyjiqy3ardZsRtbu

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.ronaldsmith.loan
Port:
587
Username:
[email protected]
Password:
BillionPay$
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9968a0eda39573ffc6e9ed8f1d6ead0c4490349301593a1b5a1f9ece87848be1

Files

9968a0eda39573ffc6e9ed8f1d6ead0c4490349301593a1b5a1f9ece87848be1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ