Overview

overview

10

Static

static

10

70566cad8f...18.exe

windows7-x64

7

70566cad8f...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    70566cad8fa0113f5f3b55296492b33a_JaffaCakes118

  • Size

    292KB

  • MD5

    70566cad8fa0113f5f3b55296492b33a

  • SHA1

    d4326e8bdef1472f74f0b7a57e69c041b67fd9fe

  • SHA256

    b847b50eca498150919ea1586251bd70fa9ba87208b934b6ba8fa097ece4600e

  • SHA512

    e432bb289d0ac26cdc655fdaa37cbae4d30e39c0d18485a8cc521f8408548a82adaa31c3ad016813569a8b5010526f7a5531f3f8255c047cc76e3336603d0286

  • SSDEEP

    6144:Z8kVRINz+fbcjX/H7p/e+KAAs2q7qD4PVeLMX7bjoqTV:ZpYRjF/ex4AL2oqTV

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.oyxwise.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    SKwbqPi5

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 70566cad8fa0113f5f3b55296492b33a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections