General

  • Target

    1f51fdedbcd2a8906f63e312ebbefbde_JaffaCakes118

  • Size

    291KB

  • MD5

    1f51fdedbcd2a8906f63e312ebbefbde

  • SHA1

    24ad355eb6ed3402cba05181b48111338f99215c

  • SHA256

    b12b8ef3442d8e92948490b3cbe0e929866022da6015ba54c78f80fe4d7969d8

  • SHA512

    cb51394641f256f45f076ab9b7cd42f16eb893aed7a9237815816e5f6b172ac7ab20d9535c227158f6b8831470207a520364a23f7b7e42b3495df64dc4586c07

  • SSDEEP

    6144:+NBcfxy9LK1+d9Y8yVp9Dly/ROi47qoschXHSedhebBoeT7:+7q3d9xgfBWXPioeT7

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.psturyana.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    nPp^OJV1

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f51fdedbcd2a8906f63e312ebbefbde_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections