General

  • Target

    b6369e9620660614cce29565f57c8c68608ed4f04d392252b587453194a62c6d

  • Size

    243KB

  • MD5

    a458d64ba33af5150c642a36b7e255cd

  • SHA1

    670053a31458dcebd9dbfa06da90d5f6165194c8

  • SHA256

    b6369e9620660614cce29565f57c8c68608ed4f04d392252b587453194a62c6d

  • SHA512

    731dfb701173de924118431e95c11a6a764f4b0e7e2c687f7eea418e9db09cbd3b935c0bb1463b67a4d35e63e74f098e0b84813478d59329735a138895a2958d

  • SSDEEP

    3072:Cb4TbQocYU4ojx22IMy/R8g4pJrCQkgcIyAtM85zR/lBx1tPUu:CbwQocYU4ojx26WRQSQkgcIysMQB/h

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6915333261:AAFz5GgbyGR17VBTxatWUWmmjjjBFhicKds/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b6369e9620660614cce29565f57c8c68608ed4f04d392252b587453194a62c6d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections