Overview

overview

10

Static

static

10

434596b639...18.exe

windows7-x64

7

434596b639...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    434596b63967c2edd2776de358dcd40d_JaffaCakes118

  • Size

    301KB

  • MD5

    434596b63967c2edd2776de358dcd40d

  • SHA1

    e1111119c88daea2fc6395f5f64fbe0c51bc1fa1

  • SHA256

    0cd79730fa0b7d7e204f40888fe7ff9cb3b86bbaadf3aa95f9295d8b8411b2bd

  • SHA512

    d9a72206643ea1a025a71c13eedbb95e95423fcca9cbbf85892909c3a489589a94ca9d32474c7398e5a605068b0c2fe4115cf55af292dda805c39fe2173eb2c9

  • SSDEEP

    6144:pa22LuvWSjpk4kb0cV9Lrz4HeX5nUdizEkCWBklb:ppvWM9cVl4eZ4k

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.psturyana.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    jKuIidx4

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 434596b63967c2edd2776de358dcd40d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections