General
-
Target
c13845c5369b753fdd3070b64677c9dfb08de95d66f1a3543a0d6cf1784450ae
-
Size
83KB
-
MD5
983592bb18385d5b71675e8186a80521
-
SHA1
e98a22c35e1297be3c71454d2be7e9ea4cbab6a4
-
SHA256
c13845c5369b753fdd3070b64677c9dfb08de95d66f1a3543a0d6cf1784450ae
-
SHA512
c3e36e6b0b1ad15fed22227b83e5554764883fdfc8ac1d2c0663f3bef79cfe23e7778e603127a6f3d6b7f8c9dd023cdeddf44c1d00e02bfccb34f3b75b821acc
-
SSDEEP
1536:7AX9bm87xZpJ0m76t8xsU/WNmseoanJ4/O8G4Dz15EuDFpgM9laGnz:yl7xZpJ0msU4Hep47DzrEoO6l1nz
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.seawaysfreight-bd.com - Port:
587 - Username:
[email protected] - Password:
36@SaM%sFl# - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c13845c5369b753fdd3070b64677c9dfb08de95d66f1a3543a0d6cf1784450ae
Password: infected
-
27896043c515b704ea8c7bfa6bed64e2a8b09cc820205c3ee3c4cdc8988c3f91.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections