General

  • Target

    519cf912766f57ce3dca12abfc30c29ad8b9b823c5a1bb93d2358feaf0d3dae7

  • Size

    216KB

  • MD5

    8b2e108b56d336f606959e875d525b0c

  • SHA1

    f1900c8e00c420b33b9320f8c0a260f5f50a8856

  • SHA256

    519cf912766f57ce3dca12abfc30c29ad8b9b823c5a1bb93d2358feaf0d3dae7

  • SHA512

    e01d1ebb0329a64db4d64edb0ff33e4cf6097d00d46d3544a8a2889777ea1c2dc092965fc244ade6d9c7659ec53b8238d013b882c68b5e8183544d0c482d7cfb

  • SSDEEP

    3072:5GVYnK7t7xe2uIGCbD2o1XUaCMvUJuR35u2rt/JyHt1iJZV9xAJUaiC4nW/KAUq7:5nImMUW8JAJvsHo9qJUairAnU

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5160342877:AAG7aI_cOY3UzpErIEUdfVUJMJszvGYLIiI/sendDocument

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 519cf912766f57ce3dca12abfc30c29ad8b9b823c5a1bb93d2358feaf0d3dae7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections