Overview

overview

10

Static

static

10

6feff3a8bf...18.exe

windows7-x64

10

6feff3a8bf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6feff3a8bf84aaa1364daedf7bfb72e6_JaffaCakes118

  • Size

    282KB

  • MD5

    6feff3a8bf84aaa1364daedf7bfb72e6

  • SHA1

    3d428c810b487d9729e4c49802350930b04b2862

  • SHA256

    3d01ff473ee7f0b842e34003a92b7c862f7ffed9b16700c03e00de70c7c3e431

  • SHA512

    74e7107d17492cc67e322594494a4089fff690cb8a0e449d0936b03a2b432c51bcf852bb208df23559d91273525050b62a6ff91d78fadf4be414bff5059314aa

  • SSDEEP

    6144:5IUHZIuUj87QNjeEnBeIsjGAY71bNpoHm5JbE:bH6Z87uisstYFL

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.sclooke.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    Ay(jdmW7

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6feff3a8bf84aaa1364daedf7bfb72e6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections