General

  • Target

    c4b82cc28e6c0ac49fa2aba3ccc5aad6c8c2f99cf94b08be2292d9ef8df6e83f

  • Size

    165KB

  • MD5

    3b4ad21ffc147186c64392449273e0d3

  • SHA1

    8143a1eddff3afb140a2c12edae8960981dbd3d9

  • SHA256

    c4b82cc28e6c0ac49fa2aba3ccc5aad6c8c2f99cf94b08be2292d9ef8df6e83f

  • SHA512

    f398c3c0c383872831d49a225b39f8217bfc237e6f37c8f60f7e6e9b4d644f0fb2367b837296b5e4cf89fe1973df4a138458f04be8797b26814e9c10da9158d6

  • SSDEEP

    3072:su2GML9ptolAMtfIonXUVue++ueeeOe7MYJ+fjD1LbZEp9/bt0wDPW1B9gt:scsXtolAMtfrnXUFMfjdbZEp9/bt0I+1

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5722751142:AAE3J4LthJSmYUaMwzknpZ2inB2tozo_CRY/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c4b82cc28e6c0ac49fa2aba3ccc5aad6c8c2f99cf94b08be2292d9ef8df6e83f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections