General
-
Target
49d0dff334b9905fc019d7e1f5538a30973ebb89501094ab6bb286139ef7992d
-
Size
307KB
-
MD5
3fa17f286b82561d7733eb15f464407a
-
SHA1
324e0e6b2ee86f777babf86c12a84934109690ab
-
SHA256
49d0dff334b9905fc019d7e1f5538a30973ebb89501094ab6bb286139ef7992d
-
SHA512
03bbc77cae35ea87618dd1d8f067e51c0bcf5fc612ce09a52e23bcbe40e9e444439253a90fa7a7fe4892e1776727915fcbea37eedead7625e4e56331d840e841
-
SSDEEP
3072:kjBRhJ5hj2zAtHcnufNmv3KM4bUUzDIIAfQrb4xFeqlZ4ejNHKBe91BSxO:kFRhJ5hyzAtHcnebUUQfqqlOeZqW2x
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
vololiberotrentino.us - Port:
587 - Username:
[email protected] - Password:
nrS2iVFluOE6 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
49d0dff334b9905fc019d7e1f5538a30973ebb89501094ab6bb286139ef7992d
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections