agenttesla | 35c7353637d81c7e2e83fabdf36681ef6f30f24022cc0fbdc60905da017d051e | Triage

Sharing

General

Target

35c7353637d81c7e2e83fabdf36681ef6f30f24022cc0fbdc60905da017d051e
Size

238KB
MD5

04d87a5fe09c880690bf811f621635b2
SHA1

19a461f69ad550175207f861e7ed43d6bc41e784
SHA256

35c7353637d81c7e2e83fabdf36681ef6f30f24022cc0fbdc60905da017d051e
SHA512

148f62a76b35ec59fd329d8a621eade1bfd96a3e7fcb55d57aa3dba9add4b589518bd33e947658fb3f9ec0306cf545579a25863c86d4a2557d3479b9f4e3dc78
SSDEEP

3072:G3dRQgo4Q4BWRR/WH8iKUvLpCMk56Ye5NVwtc/ZC65:mdRQgo4QGWRVWXN1C9MYVt+

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
terminal4.veeblehosting.com
Port:
587
Username:
[email protected]
Password:
Ifeanyi1987@
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
35c7353637d81c7e2e83fabdf36681ef6f30f24022cc0fbdc60905da017d051e

Files

35c7353637d81c7e2e83fabdf36681ef6f30f24022cc0fbdc60905da017d051e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ