Overview

overview

10

Static

static

10

18da970594...12.exe

windows7-x64

1

18da970594...12.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    18da9705946e4fb06811a8d6d62300209a1776db5fdb4601c8743af4fc94e412

  • Size

    165KB

  • MD5

    233814b4060c23eb3740e03d1a8c32e3

  • SHA1

    1f727e459b41ddd80858b403cdca3ff82c00675c

  • SHA256

    18da9705946e4fb06811a8d6d62300209a1776db5fdb4601c8743af4fc94e412

  • SHA512

    f453d80882b406b3125aa297d74181cb4b6c4d6e5d6efb090e240cfccfe5c2f7bdd140cec8ff047d56e30c6a15ff5081d6cfb97f4ddf5a25ad06986a7c537ff1

  • SSDEEP

    3072:g3kPjENIn7jVecKt1bAomV1dRaK3CDeCiO0YNCKF6mpHhqL:g3kXHgcwMLvHO0YtD

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5932003035:AAEaLtKkDh7_bNUDpa9r7bYkVcMTGKSmWaM/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18da9705946e4fb06811a8d6d62300209a1776db5fdb4601c8743af4fc94e412
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections