agenttesla | 68734e76fb815354cc0f198c4bc4ae635a1a23224941d94083c41b0873e002ff | Triage

Sharing

General

Target

68734e76fb815354cc0f198c4bc4ae635a1a23224941d94083c41b0873e002ff
Size

164KB
MD5

398b7493801cf7e2b74eb698a8bf36b9
SHA1

0edbaa2353154dd30ce20bc80b2cbdefb60229e8
SHA256

68734e76fb815354cc0f198c4bc4ae635a1a23224941d94083c41b0873e002ff
SHA512

2ec1b688ce26ae2c900755b97ea9df49c862fc8a7c5e647a4554ffee5c4f8869b9edda9668ad78fb2b841e8365a5f2f1e7ff8b4cef3b345e1b51d3ef2d36e78c
SSDEEP

3072:VLZNzp2wxS98mggVKWZ0iSa9XPh6l0h2VvJ/4lyi0BKLv8PJAL:/Jp2wxkRggVKWZ0/aNJ67VRwlyiSzP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
logxtai.shop
Port:
587
Username:
[email protected]
Password:
P2I7QjES_T6o
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
68734e76fb815354cc0f198c4bc4ae635a1a23224941d94083c41b0873e002ff

Files

68734e76fb815354cc0f198c4bc4ae635a1a23224941d94083c41b0873e002ff
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ