Overview

overview

10

Static

static

10

fb4e83e86a...3d.exe

windows7-x64

10

fb4e83e86a...3d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb4e83e86a7922340756971d6c2de46ecb73aa0e55e62047702149267927dc3d

  • Size

    234KB

  • MD5

    685545b03d8a83f08505c1236125eedf

  • SHA1

    3f1659d4c2947ee4e34a5ad228aca205f0dc0630

  • SHA256

    fb4e83e86a7922340756971d6c2de46ecb73aa0e55e62047702149267927dc3d

  • SHA512

    99474261ec360d9727e1103c2f190d2a934c718c36cf59e905af0a27aba033a16ff8ff2b651e3a78af4f3bca82bc771f74c6be01508398ffd06f92ca97c034ad

  • SSDEEP

    3072:8AcUyHjvD3D7QnzlSfEq+7DJyD5G10L8f:8ZUyHjvD3D7Qh+w7Fye0w

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.amtechprinting.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    B=OgTAJmiPuN

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb4e83e86a7922340756971d6c2de46ecb73aa0e55e62047702149267927dc3d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections