General

  • Target

    eabacd19d31a3f06a9d83aa3dd8ccad71fa7c0addf6914da7ebf7e641d69e973

  • Size

    165KB

  • MD5

    697a5c7b9a305868885d3cecc9f05a98

  • SHA1

    cb43671a153ce82f243c5bf3b74f6fd45052e75b

  • SHA256

    eabacd19d31a3f06a9d83aa3dd8ccad71fa7c0addf6914da7ebf7e641d69e973

  • SHA512

    eb81e6378f0d95efe99e9bd74d0afcadc953f85aaa4099478ec3f8aed3f8bd4cf5c4c53628b55c7414084ff697deabb533f2024e544a43c70cf04ca2f3d9cc0b

  • SSDEEP

    3072:R4iMeZJuNcHBqw651cxVtTssyskqCEkeTBEUCNkXpnHh9W:R4iM7eBfQcxVJUy7BXXpB

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5998942230:AAFdNraKyf9jiD3__pmissoEtTEBOrjcXvc/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eabacd19d31a3f06a9d83aa3dd8ccad71fa7c0addf6914da7ebf7e641d69e973
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections