General

  • Target

    81e7ec1a6594db53a295dda5dfb9e44e602182be4fdc571101898e392fe48800

  • Size

    235KB

  • MD5

    5f5ba6932f4d6862eafad04429f325ba

  • SHA1

    4d5892ed7b2d20b52e9ea0695c20d85c2c244f9a

  • SHA256

    81e7ec1a6594db53a295dda5dfb9e44e602182be4fdc571101898e392fe48800

  • SHA512

    c40c47a3d095f8677ccc42e57fad1be4be241eb0fb27c5fc400b1d7dcdf39abda0179ba658dae0621f070d4a4eb12294e1771d1585f2fd16bd2cf1e0870dcac0

  • SSDEEP

    6144:jsM0k87rAMRy1Hs6SlGRJL/pv8twVoYY:jsM0k8AMRy1oG+tw

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.folder.ro
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    xgkFQ6fqqo}J

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 81e7ec1a6594db53a295dda5dfb9e44e602182be4fdc571101898e392fe48800
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections