agenttesla | 73e443419c142c80da43bda0677d324d8dd516bfe777d4a2be81202514b799bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73e443419c142c80da43bda0677d324d8dd516bfe777d4a2be81202514b799bf
Size

236KB
MD5

394f315ef6598217492f9fe53d47ee0f
SHA1

4f15c6dd67f55c7fa96e7829b53441157a72402d
SHA256

73e443419c142c80da43bda0677d324d8dd516bfe777d4a2be81202514b799bf
SHA512

c49ac9ea07958dbf4531b57ed4c014a2ff943e50dae704619943adf6e8d53d04a4111033b6210cdd3cb11281072f38653184a75a01f69b42aa014b41d38c16bd
SSDEEP

3072:krABP1RVJljBXrCbIMjJS5JgNIxnixY5WR5IUCZklB8f:krSP1RVJljBXrCbIMqKNI8Y5WMbZM

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.royalgroup.vn
Port:
587
Username:
[email protected]
Password:
Royal@12345
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73e443419c142c80da43bda0677d324d8dd516bfe777d4a2be81202514b799bf

Files

73e443419c142c80da43bda0677d324d8dd516bfe777d4a2be81202514b799bf
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ