agenttesla | 76b21d8f76f5d3a19485caf77961ed7f656fa55a23e6d6416e170743f140c483 | Triage

Sharing

General

Target

76b21d8f76f5d3a19485caf77961ed7f656fa55a23e6d6416e170743f140c483
Size

12.5MB
MD5

a84c11766b9772a1a7b16eaae0d99645
SHA1

e7adccd7f90e08a853b65da80a9a18d0d119b7d8
SHA256

76b21d8f76f5d3a19485caf77961ed7f656fa55a23e6d6416e170743f140c483
SHA512

3836f60369053f15aac520c001099d78899623092ef8d71b5f80d3ee57c19b970c2a52dccdd24100d69a4c5d577b00cdfaa71b493d280ebc27ffaffb26fc371e
SSDEEP

98304:u1JlxVwc1JlxVwzR1ecR1eXlymNlymphrGhr:u1JlxVr1JlxVGRIcRI1y2y8rEr

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.quoctoan.vn
Port:
587
Username:
[email protected]
Password:
bGMJNaGYNTLC
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76b21d8f76f5d3a19485caf77961ed7f656fa55a23e6d6416e170743f140c483

Files

76b21d8f76f5d3a19485caf77961ed7f656fa55a23e6d6416e170743f140c483
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ