General

  • Target

    FlameWooLogin.exe

  • Size

    16.3MB

  • MD5

    26c5dc31373ce9f040a0c1c3a56a5c6a

  • SHA1

    4740f9e40245743f22a19abb4f0796b6e333af19

  • SHA256

    0398762489b7d24359f0fcaeaf14368f5195cee60664a74053505663ad39e15b

  • SHA512

    9453c01faa1542efba4a6438df164a5a63cdd23506b539af90f8c7d1283a32368af6b85abbc39554f4346b3d95b604e9d2987ac7b7865e87c672129e29084708

  • SSDEEP

    196608:ryv9oaKckmTjkZ1mvtiBTd7EERjnhVGO0UFlcT5k5GUnqF6IyJXsyKckvK:ryv9uwkgu5lbOOtFl4UnqFIJXsPc

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FlameWooLogin.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections