Overview

overview

10

Static

static

10

d986f56e4e...df.exe

windows7-x64

1

d986f56e4e...df.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d986f56e4e93d43680dfd59ed3c94116e3e3c3d8dd2a4e3da486ec1e4c5334df

  • Size

    236KB

  • MD5

    ebece2dd349f822282fff1bf85e7c42a

  • SHA1

    4396fc482f0b62cb7444c08403c9f56b4a6275b5

  • SHA256

    d986f56e4e93d43680dfd59ed3c94116e3e3c3d8dd2a4e3da486ec1e4c5334df

  • SHA512

    86105d6a3975276b20b31a02df5da9257d7a74de772ed5c2eca473a48f1560212e1d405cb6f10e1086434eddd71acb7113455b4318c08c0cc842315a7d6eeaad

  • SSDEEP

    3072:hekQDZhRZJ1pczOYqkvM7MJl+I1Bt/MT+d9ueOaGq51zhQV3sl:hrQZhRZJ1zaxn+IRU+W+G8hQF

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.sisaurora.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    a&_j{YjK*;yE

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d986f56e4e93d43680dfd59ed3c94116e3e3c3d8dd2a4e3da486ec1e4c5334df
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections