General
-
Target
1512d9ce95f2843e6b29281cf034cc6a8a20b7340535a58ab80c5ed3f7bb5ebc
-
Size
84KB
-
MD5
38cac96abb01b13a43d4a3f7d3f35866
-
SHA1
f76460ccae01ea0d5569609520b65923aafac9b1
-
SHA256
1512d9ce95f2843e6b29281cf034cc6a8a20b7340535a58ab80c5ed3f7bb5ebc
-
SHA512
29997a39fa353cacf8026f810228489efd243568c1f0bec4083ac00520dfe1454d842d287803ea70b6f9ef69a76ded64d50c3f4f733c3c68f8e9230318310d61
-
SSDEEP
1536:/BAs7fhx/gzGk5+7WxUTCmWSyqYR+sPuigkl50jdOXkOX3G1mMfbNqO:/Ws7fhmGmWbWNqBsPZqMPnG1m2
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.gurytour.ro - Port:
587 - Username:
[email protected] - Password:
gurytour.rogurytour.ro - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1512d9ce95f2843e6b29281cf034cc6a8a20b7340535a58ab80c5ed3f7bb5ebc
Password: infected
-
d2269cf8ffdd1f1da3f64d8f455e223259bfffcff89defd8c69813316c8640d9.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections