Behavioral task
behavioral1
Sample
1714574301dc258255f3f7ccb96253ff386133347dc0a57421197b32d9050e344d571692e1726.dat-decoded.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1714574301dc258255f3f7ccb96253ff386133347dc0a57421197b32d9050e344d571692e1726.dat-decoded.exe
Resource
win10v2004-20240419-en
General
-
Target
1714574301dc258255f3f7ccb96253ff386133347dc0a57421197b32d9050e344d571692e1726.dat-decoded.exe
-
Size
238KB
-
MD5
bfc2eb591ad87cffce1dd3f5085e43e3
-
SHA1
1014e96c0cbbe5b596b060096f7796f1d5e1d4c9
-
SHA256
aa45cc23581cddb7fcc637b634c203f475d266032fa95725a3f7e84330c1ebfd
-
SHA512
706b79e64373f62c4750812793a5043d22f413b3c6a5f980bc12b98483f5f9c37c8997a9f01c1a43b1d5753d06d7d5ef5f80bc7562da461b48f4fb8fe3a33697
-
SSDEEP
3072:UqKpQb1htB1Tpeaqm86z4k8geoG0MsvPb30+n5Lht+r7E:+Qb1htB1lef6YNbsnb3jLtM
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://ftp.folder.ro - Port:
21 - Username:
[email protected] - Password:
R2r76%(3v^H0
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1714574301dc258255f3f7ccb96253ff386133347dc0a57421197b32d9050e344d571692e1726.dat-decoded.exe
Files
-
1714574301dc258255f3f7ccb96253ff386133347dc0a57421197b32d9050e344d571692e1726.dat-decoded.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ