Overview

overview

10

Static

static

10

38a34bdb11...db.exe

windows7-x64

10

38a34bdb11...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38a34bdb11f1ce758fcaff636f46ebc1fa1dcc786b2825b1fc48bcc5b9082ddb.exe

  • Size

    241KB

  • MD5

    a821e2148700e9b3c3531240c6d03aa2

  • SHA1

    b232b45909804fb29e1007c6000451328171cd54

  • SHA256

    38a34bdb11f1ce758fcaff636f46ebc1fa1dcc786b2825b1fc48bcc5b9082ddb

  • SHA512

    3cefebf60e92e67fd17966473d13616f920823f0136dfae6ba4577dd4ad3a646501f865817e598c83cbd7f9f98fa51060a26824b72f7195713124d11af5994a3

  • SSDEEP

    6144:HY1Lxpf3nvvsBRVNBbTrRQ1q+4n9vLOGyG:2pf3nvvsHVNB8pI9

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6388762619:AAH8JnaySQ2VtHauLKVr2Jt3seW2OsmChT8/

Signatures

  • Agenttesla family
    agenttesla
  • Detect packed .NET executables. Mostly AgentTeslaV4. 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables referencing Windows vault credential objects. Observed in infostealers 1 IoCs
  • Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers 1 IoCs
  • Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
  • Detects executables referencing many file transfer clients. Observed in information stealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38a34bdb11f1ce758fcaff636f46ebc1fa1dcc786b2825b1fc48bcc5b9082ddb.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections