General

  • Target

    bfe420c9c2b7e597ce9468361667f737dd006fe70b5e95e785a1886ff80cc922.exe

  • Size

    234KB

  • MD5

    cb5fe3de8535889aedcfeeee4af6ba9c

  • SHA1

    f21ceeb98e75e844b6f1e024b037bbb72d48cd5a

  • SHA256

    bfe420c9c2b7e597ce9468361667f737dd006fe70b5e95e785a1886ff80cc922

  • SHA512

    06369e66462ba9bd652fb3238aeca651ae406e913400da4712591bdbf1efa4050b8a8b4a5be24ca3001fd4b774b5af10b1aea5d92277a1e1cd6b32069d3d8c6b

  • SSDEEP

    3072:wW8djPklRAGjqMv+bDDTAx4vV2Ck45wlRmcbr:wW8djPklRpjqMWbPTTt2CkxmC

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
  • Detect packed .NET executables. Mostly AgentTeslaV4. 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables referencing Windows vault credential objects. Observed in infostealers 1 IoCs
  • Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers 1 IoCs
  • Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
  • Detects executables referencing many file transfer clients. Observed in information stealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bfe420c9c2b7e597ce9468361667f737dd006fe70b5e95e785a1886ff80cc922.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections