agenttesla | cd994cdca2b170bd2846aabea1c38ac38ebc9d861212995217f1b4f49bfeed5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd994cdca2b170bd2846aabea1c38ac38ebc9d861212995217f1b4f49bfeed5c
Size

240KB
MD5

ead111f33e8a31892a378b8a948643da
SHA1

b19ce964521f55ff3a2e98c4d9d61f59dd157cce
SHA256

cd994cdca2b170bd2846aabea1c38ac38ebc9d861212995217f1b4f49bfeed5c
SHA512

063e05e881ea428ac8ae58ee7e2a70f6808e9c2e37584f23e42944594510a77a61f815d1c3cc054da7e53706a3c8b2062ca3604853b94a77dfb6d991bea1eaf3
SSDEEP

3072:Nrs+6Wa+HvJ0JyyyyyyyyyyyyyyyyyyyyyLyyyyyyyyyyyy9yyyyXT1R0orHZz5G:NQ+6Wa+HvJLEEHZbMV

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
sslout.de
Port:
587
Username:
[email protected]
Password:
dataset123
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd994cdca2b170bd2846aabea1c38ac38ebc9d861212995217f1b4f49bfeed5c

Files

cd994cdca2b170bd2846aabea1c38ac38ebc9d861212995217f1b4f49bfeed5c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ