General

  • Target

    b57b61ac75ca378686912265b5e1d52a7d41430b4f051d2318ca20414f509cef.exe

  • Size

    235KB

  • MD5

    6632958e4bc956ba220190e0d3bf3e3f

  • SHA1

    1d434d74306daace66d7948696d06d1ec6096651

  • SHA256

    b57b61ac75ca378686912265b5e1d52a7d41430b4f051d2318ca20414f509cef

  • SHA512

    4e8c3fae776639d56a0696452638565f18d1ab6f6d9ba4e7148b9d3570a7f97499027b63aaaadf6597fcda037ee7a687a7db9ad54bbdbcbb5ea3f1df1f64fc34

  • SSDEEP

    3072:WNdbbDRZwjKElYK6WVNcbVBjzp++2Efh53INrHVk:ObbDRZwT7QBjV++18Nj

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://80.92.205.47
  • Port:
    21
  • Username:
    delizzasuppl
  • Password:
    99EK7bvTZr4zBnwW

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b57b61ac75ca378686912265b5e1d52a7d41430b4f051d2318ca20414f509cef.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections