General

  • Target

    b22bbdf2bf5cced25331985e38b84a704d512cc640d33d47b1a91702b2de08d4

  • Size

    164KB

  • MD5

    796ca23624436e7b37d83413307224bf

  • SHA1

    056688bb71b6d1dc76f83e45582f5bb7add979e6

  • SHA256

    b22bbdf2bf5cced25331985e38b84a704d512cc640d33d47b1a91702b2de08d4

  • SHA512

    ab86bb291546b5ad8b40ded606d66cfd2127a3e42218599f23de178999058ce52174a4e111898f7eb18eeb468be748aca41d96c69c9c62d1d86ad8bdceda316d

  • SSDEEP

    3072:5X3bNYZ88x5GR82o451Zrkg3+RYPt2caMipDunwcKe:5X3bNYZ8Y5uo451bhtnisnw

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6150474984:AAHim7TVnu5qo9qMZGpmcip_YiZO-wQpxT4/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b22bbdf2bf5cced25331985e38b84a704d512cc640d33d47b1a91702b2de08d4
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections