agenttesla | 11b4160bff1eef1bdcff6d5b87835393798fb47205a6bd6d31f15d784090ef8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11b4160bff1eef1bdcff6d5b87835393798fb47205a6bd6d31f15d784090ef8a
Size

245KB
MD5

e82bed4f511d249873ef43ed37dbd892
SHA1

2dd948f00b784599ded246d8157fdd1f5a81b157
SHA256

11b4160bff1eef1bdcff6d5b87835393798fb47205a6bd6d31f15d784090ef8a
SHA512

795a76f8fcab35b79f6bb42281b6d302be3b556c49a8cd7d0f18ced26d724db4a59966efcdf0e3771a6a2f5c4ef370f7eff7490dec0641e9f56534e36dc46af4
SSDEEP

3072:bG2dQk4UQFj09mFir9RKQeQVtMCZUz7D5/1+JLWqrh:bfQk4UQFj09mFir9tMCaz73+J6

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.ykqatar.com
Port:
587
Username:
[email protected]
Password:
kh831975@
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11b4160bff1eef1bdcff6d5b87835393798fb47205a6bd6d31f15d784090ef8a

Files

11b4160bff1eef1bdcff6d5b87835393798fb47205a6bd6d31f15d784090ef8a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ