General

  • Target

    e376bae94dc023f41d031a476072fde476caf19f00492c851e7698b6e1e6b522

  • Size

    233KB

  • MD5

    131d9bcc9fc03211f0aba528b58c0944

  • SHA1

    e02a895b8cf608b96a288dcd08d109ec9d8f06ca

  • SHA256

    e376bae94dc023f41d031a476072fde476caf19f00492c851e7698b6e1e6b522

  • SHA512

    380d069657c5b345451c783403822657fd0e825b46bbca3e51c7d3acef5d1f4b70153a420e20505f7fff33a6d074ca560c041f18179ee9490129d532246ceba1

  • SSDEEP

    3072:6V1Llsr3zn7lxhQ6K83xQsiJIaeuwPfP52mRtZPt/8:g1L2r3zn7G6K83xQsiJM/PfkWtZ1/

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://goodwillabudhabi.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    7kBDgKR^6m1]

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e376bae94dc023f41d031a476072fde476caf19f00492c851e7698b6e1e6b522
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections