General

  • Target

    6900e1d5e6327068c2888784fa805ca3ca718af3d4f3929cc244b05c12ca85a4

  • Size

    316KB

  • MD5

    065fa7300027cfb85e0a57a012682c23

  • SHA1

    1b65876eda7a4a3d21837005a0134fb005b1262e

  • SHA256

    6900e1d5e6327068c2888784fa805ca3ca718af3d4f3929cc244b05c12ca85a4

  • SHA512

    7e45e971bc9edeff8dae857c509fbc0ece4cda355635bc91b0534d91072446eb268a47245df733844c4cf78f34b0bf8f3b948a18b59f3986f112e6067936808b

  • SSDEEP

    6144:KcHL8oUcU8EmyYu/oYyy2BAKnABRjDh4C6uT:p3UcU8EmyYu/xyRwzDBT

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6813898087:AAFP8ja9C9GqJUg_QngB2-KiNZGUezlntxA/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6900e1d5e6327068c2888784fa805ca3ca718af3d4f3929cc244b05c12ca85a4
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections