General

  • Target

    3cb41f67632cf0f6d1fe35bcefb1b4f2.bin

  • Size

    291KB

  • MD5

    3cb41f67632cf0f6d1fe35bcefb1b4f2

  • SHA1

    ae49cbec07a51db0dfd2918ce828119d9df9f44f

  • SHA256

    f5764622485fd2c5ca9c996961e08e6937afd2b2f8a6f2e78858932016127bd5

  • SHA512

    7bfa22a867385ca522572aeefc05621c6bf9e6f0c05d86d64517f2e65baacd7679eb7632fea88eb7c956b2c7083774ad0ceed742401793f6e7b457a28cee6c88

  • SSDEEP

    6144:YfLgjgoeTaAnQ2RNLkkJBlaS+mY5eBdX+8x5z+blNoOT7:4AgoYRJCu/XGoOT7

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.zeyiti-sa.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    ZCu)LIW6

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3cb41f67632cf0f6d1fe35bcefb1b4f2.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections