Overview

overview

10

Static

static

10

40743b0016...0d.exe

windows7-x64

10

40743b0016...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40743b001668c1a8708544096f52b84c250f3c99c982d9abeb8d3a7207d4f90d.exe

  • Size

    234KB

  • MD5

    ee0c4eaa435374aef1f1b7f6d7d5cc6e

  • SHA1

    47abec4753b1c3b39f7d3df3543a49304015c80c

  • SHA256

    40743b001668c1a8708544096f52b84c250f3c99c982d9abeb8d3a7207d4f90d

  • SHA512

    98b3d422c4302e372b61971f58bf5c59f2d7ce248cbb8a3970f83451b0bd73287a3e83dcfde943de88891bbcbbb6e0bd7fb32d1b760aa8472f861cb2ec4144d8

  • SSDEEP

    3072:IbEmieCmoVbGqUbsHtUvrfibc2hde5sjLrc/:IbEmieCmoVbGqUbswrL2THLA

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
    agenttesla
  • Detect packed .NET executables. Mostly AgentTeslaV4. 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables referencing Windows vault credential objects. Observed in infostealers 1 IoCs
  • Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers 1 IoCs
  • Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
  • Detects executables referencing many file transfer clients. Observed in information stealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 40743b001668c1a8708544096f52b84c250f3c99c982d9abeb8d3a7207d4f90d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections