General
-
Target
ada0d82cadfa498997425b28adc1886c3cf13ebe92bd60008627756db5643bc5.exe
-
Size
245KB
-
MD5
ff249fb7303039ccb7db0f7b25f2057b
-
SHA1
92db5fcfbe38294671877f222a2d208d082868e9
-
SHA256
ada0d82cadfa498997425b28adc1886c3cf13ebe92bd60008627756db5643bc5
-
SHA512
1eedbe4f5a47dd3b42f32cd5cf6adcf57775da0eb7ee4bc83ba0d6840c856d7a4176988c14134bb133f6dabbe3ff94f3b8de448088bd66d6ee4341301e7cbe36
-
SSDEEP
3072:YhhQRIQkoUQ6hWNuC+2EsSzZu1qtX5y9FP5uGqSaop4:YRQkoUQ6hWNuC+2WZuWX5y9F8SR
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.brusln.com - Port:
587 - Username:
[email protected] - Password:
Countrycode@2024 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Detect packed .NET executables. Mostly AgentTeslaV4. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables referencing Windows vault credential objects. Observed in infostealers 1 IoCs
-
Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers 1 IoCs
-
Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
-
Detects executables referencing many file transfer clients. Observed in information stealers 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ada0d82cadfa498997425b28adc1886c3cf13ebe92bd60008627756db5643bc5.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections