Overview

overview

10

Static

static

10

27120a5dae...18.exe

windows7-x64

7

27120a5dae...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    27120a5dae9b162c505d7f3d8ca272d1_JaffaCakes118

  • Size

    291KB

  • MD5

    27120a5dae9b162c505d7f3d8ca272d1

  • SHA1

    a4e3e2028b5a7aede67813d533f2ceb30a05016c

  • SHA256

    d4abc3ef5e70a76a726fbebc05067589be91557b856d4dee55fb723029b68d15

  • SHA512

    f9d0494b17e2f27c94e66a7736e1702bac2f3e1ba15a8bb0cf15e827e8785998c4d15afb0293bca1f96354040ce11423a509926ed8bbda99056fde2289c65b34

  • SSDEEP

    6144:IoUz4Zc+Xl2yKnP7E2GIpIlkKQ++ZQYT2zbSoSTV:QkWnP7VUtmBZoSTV

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.oyxwise.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    SKwbqPi5

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27120a5dae9b162c505d7f3d8ca272d1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections