General

  • Target

    9fe714b150c40b067ced939e136ba951e9f2ffd96334c7f82445d16201270222

  • Size

    236KB

  • MD5

    f58bbe12b066176d384a0975c6653add

  • SHA1

    743cc083bb7cbf647ffb122a2fdcedcab1cc80aa

  • SHA256

    9fe714b150c40b067ced939e136ba951e9f2ffd96334c7f82445d16201270222

  • SHA512

    3c87a9c336a16a3b021c49bd6ad65310e1e88ad117d7f7a09642684efa62a9943a95bbf34430094877be9ad14978c0c278a3c15a1c71bb74cf9297970fe67fe2

  • SSDEEP

    3072:gZkc8UkcMQSQ5hzuWbEir86L6/JOQtF5CGArrBD3i:Kkc8UkrQSQ5hzuWbR0JpzAx3

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.concaribe.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    a_7{s!=?qKY!

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9fe714b150c40b067ced939e136ba951e9f2ffd96334c7f82445d16201270222
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections