General

  • Target

    ecb8f89f3b7031e014a52d80e2c043a3fcfadb1fa2385af98fb15e7336b1c606

  • Size

    243KB

  • MD5

    8e09952277c6d3f0778d6057cbb9f4e2

  • SHA1

    d1f79daf85f593563cc2650b9ad363503b2226e3

  • SHA256

    ecb8f89f3b7031e014a52d80e2c043a3fcfadb1fa2385af98fb15e7336b1c606

  • SHA512

    9b458e10d1bae8933e728e3703b0180a47a4405d3ca38c24602ea9303ddca46d2572a1c2ddb1c53cf281b3d6e68de47a01a8d22da949cbb8bb879e83c893d925

  • SSDEEP

    3072:AN1UGKuqGO7pPiherJ3xh7zQWFulY517E+8ati8J:AN1UGKuqGO7pPR3psWFygI+NA

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6471739339:AAHUj2nMu0JbUDBwZSaaTiCky_0Jv9RAILc/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ecb8f89f3b7031e014a52d80e2c043a3fcfadb1fa2385af98fb15e7336b1c606
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections