Overview

overview

10

Static

static

10

GY90009000GH.exe

windows7-x64

10

GY90009000GH.exe

windows10-2004-x64

10

[email protected]

windows7-x64

10

[email protected]

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6e7f53d75836a511f7d508b5a2b8702d423d17564fb0351a51130f329764fa35

  • Size

    786KB

  • MD5

    0fe2e713d4c2c55ffe4e21619a25b3eb

  • SHA1

    52f2518036a5476217410b82393ba9e5d1ca163b

  • SHA256

    6e7f53d75836a511f7d508b5a2b8702d423d17564fb0351a51130f329764fa35

  • SHA512

    6791b5babd13c2c00c683c8025c00a20be4c4f66d8271ecdd130faf11ea13f10b68e54c88b138f063c4c2c6979f184311be1715d7b1ef5f643e16aa04ce62550

  • SSDEEP

    24576:9xIrssZECvwuBMO24tRW5wmbDGHNOTsJJbLWqv:9xIrszuBMO24t/+SATuLWi

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.antoniomayol.com:21
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    cMhKDQUk1{;%

Signatures

  • Agenttesla family
    agenttesla
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6e7f53d75836a511f7d508b5a2b8702d423d17564fb0351a51130f329764fa35
    .zip
  • GY90009000GH.exe
    .exe windows:5 windows x86 arch:x86

    c4540f421523fe2dc591e50be5ad7d0b


    Headers

    Imports

    Sections

  • [email protected]
    .zip
  • [email protected]
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections