agenttesla | d4a651b647ac71169e1f8da33965a12f53b31603d51ac52700366479731afc5b | Triage

Sharing

General

Target

d4a651b647ac71169e1f8da33965a12f53b31603d51ac52700366479731afc5b
Size

234KB
MD5

3f9ff2752006d46bb2ece5ef0b8569e3
SHA1

d4526267b5389b7942d0bd8b998364ae6f8479c0
SHA256

d4a651b647ac71169e1f8da33965a12f53b31603d51ac52700366479731afc5b
SHA512

4c7668fc3ace51d79e6d459093e0191304aba4fc025d5f76aabd6996d81ab390989f60a3851f5ba77480474522e708724ef631ae2d4f577ca7e1cd7f4f237f5c
SSDEEP

1536:0NXVKydlZlRVpYFQOPDmnrbtCagyni6ng3PyhZ5S/jt0k8MN52/Qj:u0CZlRVpwQwmrbzfiYg3K/5E2k8MB

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.guestequipment.com.au
Port:
587
Username:
[email protected]
Password:
Clone89!
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4a651b647ac71169e1f8da33965a12f53b31603d51ac52700366479731afc5b

Files

d4a651b647ac71169e1f8da33965a12f53b31603d51ac52700366479731afc5b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ