General

  • Target

    28d369094dc57e3464ef1c4e5000b4a38c7368663d78e61853eeecf52d87718f

  • Size

    238KB

  • MD5

    f293f4b7582e818ff1cf8e1889a77e78

  • SHA1

    c54f31a4655502f50eb6b18cde1ee80c157ecd48

  • SHA256

    28d369094dc57e3464ef1c4e5000b4a38c7368663d78e61853eeecf52d87718f

  • SHA512

    52a814c696726546b587a848da860dc8dca30360013e1d10b2e4c499731235e8fc7303f45ad559e34c651cfa0875c46d80e0c493bd14cfea685243d025643037

  • SSDEEP

    3072:BrehNgh/KZ5Ijo0L6jgK+RvphlX1JH9k84x:P/+5Ijb6jgzRhxJJ

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6614320818:AAGaAjTvk3wSvimEEonzDgNNXGNCliFwSLs/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28d369094dc57e3464ef1c4e5000b4a38c7368663d78e61853eeecf52d87718f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections