agenttesla | fcf3fd803510c9c06c6575f41e1a03e73c968a77e5ebbd93694bc20a54b53b61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf3fd803510c9c06c6575f41e1a03e73c968a77e5ebbd93694bc20a54b53b61
Size

245KB
MD5

caff97eaa9a91f75f6d1c21ebf464e2c
SHA1

89331a077a735bb0d6a68127eb4bfd36a70209b0
SHA256

fcf3fd803510c9c06c6575f41e1a03e73c968a77e5ebbd93694bc20a54b53b61
SHA512

42b668560d6a60a0933ada66a3dbc924e473fec40ca10a736c9fcd768b78ac494afac1be8d986b4c4491aefd6799178d9660e512d97651763af80436cfa8a5a6
SSDEEP

3072:7rv6I0Qk4SE/Ktm95r3beSrg3EtLt7+R5iqyT/T:7WI0Qk4SE/Ktm7r3be0g36LtCByD

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.greaterdoha.com
Port:
587
Username:
[email protected]
Password:
baller01baller01
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf3fd803510c9c06c6575f41e1a03e73c968a77e5ebbd93694bc20a54b53b61

Files

fcf3fd803510c9c06c6575f41e1a03e73c968a77e5ebbd93694bc20a54b53b61
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ