General

  • Target

    384b4910d59d1f31df75d6232d7a1e8cc91a9ce29c68ffcefd26b52a372386f7

  • Size

    168KB

  • MD5

    51590e6a0ff1cdbc7e24fb6e1831ceba

  • SHA1

    79ae57efbdb83379242d5093ae3a0882ef2aef88

  • SHA256

    384b4910d59d1f31df75d6232d7a1e8cc91a9ce29c68ffcefd26b52a372386f7

  • SHA512

    622c9b2f12f7bc1f5eab477910e1399ac2ed54fa2ac77a4e7db103e984016fc9a384dfeb717aaeedbeb5f58c431155b5fb8ef65e86eed6bc07a08f1d9e8a2409

  • SSDEEP

    3072:cfkLJLahKd0DjzOAuE2YJx+SWBP7G0k3ORdSUCntPwZb7OtlUn:vL00d0DjzOjEFQJ5dSUwOZbiH

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5826219676:AAHzaO_KidyTjZ5PTwFErYpZivpT8wfDUno/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 384b4910d59d1f31df75d6232d7a1e8cc91a9ce29c68ffcefd26b52a372386f7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections