General

  • Target

    631ba21d543678ab025037ad8f53cfb354f097c6bf580019be33a3364019c525

  • Size

    300KB

  • MD5

    4990d5be4b737ada6ac3b70ac9579054

  • SHA1

    1790ca8f04ff2cb3ee92c6a1d29855b30343511f

  • SHA256

    631ba21d543678ab025037ad8f53cfb354f097c6bf580019be33a3364019c525

  • SHA512

    22d99a81e8ded9923101864b715eea3cd99a81a1ef19647eda18de711eb5e4add61d6fadba2a36887af6802ba75d0fd8ce26a92fa59de73d30b615e9e7469703

  • SSDEEP

    6144:vmhwqSIB8yXHtcoFa7XcM4qa3IB0H1V2xiYq42FrcsqGJlmYb:vC6IBFteXJ0/EAL2GJ

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    mail.flood-protection.org
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    emmydon2424@

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 631ba21d543678ab025037ad8f53cfb354f097c6bf580019be33a3364019c525
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections