General

  • Target

    8a1867a13279fdf12f5a08fd9d12940456ad99ea58bea95d6420e71b5a20293e

  • Size

    218KB

  • MD5

    9637f24adac53fa3c15999b3a3263f92

  • SHA1

    54a0c02594132e2f76893046364ec677ac89cf4c

  • SHA256

    8a1867a13279fdf12f5a08fd9d12940456ad99ea58bea95d6420e71b5a20293e

  • SHA512

    a21ec7f3e896ed7cb0d9b798a24222cb40bc65c68a33890b18bc492641cffe68659493c55644a2a163da4f1646d14334f4c26fc41da235204d692a3bee97df63

  • SSDEEP

    3072:U3qH6XzPC4kYBeD1yDDeeYOy5UcabNpZmxqq/zLHKFSmx751Xyw6/kb6:UaaCxyDDiU9xphq/fKlV51Cw2kb

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.yandex.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    zdnogtdpxwezlzgx

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8a1867a13279fdf12f5a08fd9d12940456ad99ea58bea95d6420e71b5a20293e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections