agenttesla | 098def44f14b9b90e1f2fc8e00d7d1e33cafd4b8057569e0da22d1fdf5babb58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

098def44f14b9b90e1f2fc8e00d7d1e33cafd4b8057569e0da22d1fdf5babb58
Size

305KB
MD5

2ebd0a101ccd791688eab6beeaccdb8e
SHA1

a22a571edeb57b25739e1ef5a5d31a4c7470d873
SHA256

098def44f14b9b90e1f2fc8e00d7d1e33cafd4b8057569e0da22d1fdf5babb58
SHA512

24629b331c0871b56b852d45ff4bd18c2b7e4710bf965b5ce95cd1c1fd6d634c65ef0f0864badaee5097716a83b8aa3ca0ec461ab5995f9c9296477c8fb81028
SSDEEP

6144:dzIKKsyWWqOamcJqTVkeRJhUNnCGiIYkPlaGTGGme:NIrs/WqOamcf4UNnCOXG

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.kino2.top
Port:
587
Username:
[email protected]
Password:
]]KMGj9lIqJ#
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
098def44f14b9b90e1f2fc8e00d7d1e33cafd4b8057569e0da22d1fdf5babb58

Files

098def44f14b9b90e1f2fc8e00d7d1e33cafd4b8057569e0da22d1fdf5babb58
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ