Overview

overview

10

Static

static

10

6698c56d32...7a.exe

windows7-x64

1

6698c56d32...7a.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    6698c56d327448d1516f283681dd1eb741f08a31c9b20a4eb97f7a8b15da2f7a

  • Size

    236KB

  • MD5

    a5fbd64056fbdbd6c7437a49b0874c94

  • SHA1

    4e00ef887d492c5376b6232a9a094ea35dcf1e72

  • SHA256

    6698c56d327448d1516f283681dd1eb741f08a31c9b20a4eb97f7a8b15da2f7a

  • SHA512

    d223e4c460e6a34504893e37f0014f5b3186e0288ca0c1d2a2b863ede5372df3de412da71abc900301119ea7683973eb403207156616b654223f30cdf67c649e

  • SSDEEP

    3072:IekQDZhRZJ1pczOYqkvM7MJl+I1Bt/MT+d9ueOaGq51zhQV3sl:IrQZhRZJ1zaxn+IRU+W+G8hQF

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.sisaurora.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    a&_j{YjK*;yE

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6698c56d327448d1516f283681dd1eb741f08a31c9b20a4eb97f7a8b15da2f7a
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections