General

  • Target

    a9bba02b96d42694417f39596c58112f086b63160d2bd5ff4beef616fb130bb2

  • Size

    238KB

  • MD5

    e0659414477aceed1bd5ef7c92dc6b7b

  • SHA1

    df1045306471a6b392cce2f28bfd4efdae6dd31b

  • SHA256

    a9bba02b96d42694417f39596c58112f086b63160d2bd5ff4beef616fb130bb2

  • SHA512

    db13b348fcd04d201d0dfb8499d65a1b47e333931bf27146cd2472ed062bf61faf278a9cbbb1f5f3d2f366856d61fc8471f91374b174a08789d6423f7fad0a45

  • SSDEEP

    3072:BhGIm6GyWP/rUcJhwyyyyyyyyyyyyyyyyyyyyy1yyyyyyyyyyyy9yyyybe4VGDmH:BNm6GyWP/rRdBG6SOqeV

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.lampadari.gr
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    P8P[uVeJU=vh

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a9bba02b96d42694417f39596c58112f086b63160d2bd5ff4beef616fb130bb2
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections