agenttesla | 95bf62b1c5190eff2e210978c870b53bae4685880395fab5c5ee689db96069bf[.]exe | Triage

Sharing

General

Target

95bf62b1c5190eff2e210978c870b53bae4685880395fab5c5ee689db96069bf.exe
Size

245KB
MD5

4c0c13426bd7ab1f38832e100ed5e5ac
SHA1

d574583e4e3f83048f4f63c8019459f1c0a32677
SHA256

95bf62b1c5190eff2e210978c870b53bae4685880395fab5c5ee689db96069bf
SHA512

acb489915d3440915d63fb149e5e0ade8722893b4104196ac9a68f8dd865a7795da5d12ed4eee8fdcf6103f09548ff222291fb9630d349cc4d46262edeffdb96
SSDEEP

3072:CGxPEOfrvzv3U+iiZ2o6S/u6K/HRthQDK7Wr455fuY5x8:CGxPBfrvzv3U+iE2od/u/jhsK7Wr0uS

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.2mfs.net
Port:
587
Username:
[email protected]
Password:
ibile.ibile@123
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95bf62b1c5190eff2e210978c870b53bae4685880395fab5c5ee689db96069bf.exe

Files

95bf62b1c5190eff2e210978c870b53bae4685880395fab5c5ee689db96069bf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ