Overview

overview

10

Static

static

10

980b645845...79.exe

windows7-x64

10

980b645845...79.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    980b64584588852f7532bf5e24f9baa2457d066f9f2f06fd2600d016ac737379

  • Size

    238KB

  • MD5

    2788f9c24efc9877a9c58d751d4f73f7

  • SHA1

    3813da7966509ff05b830e1f243b4134a8a56716

  • SHA256

    980b64584588852f7532bf5e24f9baa2457d066f9f2f06fd2600d016ac737379

  • SHA512

    c675fb1483e41a1c3fca50d72121fdf6a05decf75a319b815e8e8531fbfdcb5c4f78456cdd341654df61bf9e3e036781d80de6ae5c858c06502cdf66c9dc7c22

  • SSDEEP

    3072:AQ9U2q2SmaVI6YvJ5uWcGZUnd9mZ8uYn5+Wcekydhp:ru2q2SmaVI685hw9mSuYEWTkK

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.horeca-bucuresti.ro
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    H*TE9iL;x61m

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 980b64584588852f7532bf5e24f9baa2457d066f9f2f06fd2600d016ac737379
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections