Overview

overview

10

Static

static

10

3daa8a8c1e...54.exe

windows7-x64

10

3daa8a8c1e...54.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3daa8a8c1e2644ad7cd381c60750be1b4afe5b24113fa9304abf400badf04554

  • Size

    296KB

  • MD5

    85767748d369f08a14af614bae528004

  • SHA1

    4c3c701e6c0dca44f1b004ef1c7bc2619def4b3a

  • SHA256

    3daa8a8c1e2644ad7cd381c60750be1b4afe5b24113fa9304abf400badf04554

  • SHA512

    9bc4ba89ab3cccfd33ea58a2d8eb7bf13e284f321ed2fdd34277e9b309fc7104994d7e8e5c003d9bb8e4908c5174dc68d4bef67d39f5c3387a1e03bcd31e8553

  • SSDEEP

    6144:iNnjZH/rIJZybrVcmBRfRw+vt15XhYf1lNfOFQAb:iNnJ/rIJ8riywQbphi1lN

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.yandex.ru
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    yin.l3e@@bill3

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3daa8a8c1e2644ad7cd381c60750be1b4afe5b24113fa9304abf400badf04554
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections