General

  • Target

    1bda0547a00a94cee8af6a7f619d3304e2fe253c5a59e26ba1874cbdff547382

  • Size

    164KB

  • MD5

    f008522da2989e20a8745aa1fc449b60

  • SHA1

    37bf92928a396f156c1a60b353ecf20bb800b6b3

  • SHA256

    1bda0547a00a94cee8af6a7f619d3304e2fe253c5a59e26ba1874cbdff547382

  • SHA512

    fcfb411fdcf79d4a673c9e4a96a2ecccf550bd296c018c922cb3ca53fa3b132f9cdbd3fad15b7e42382db11c3a105ebe595d068d57d7f74aa677afeac94cc85c

  • SSDEEP

    3072:VFBpwPnT3nKacv1iAozrGFq5sUrW9uv8+2VLFtgjLtr+Fdo6tgldE3po:VFBeTXKBNHo3GFQRNiVBtgftrIo6qi3p

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6185777927:AAHgIPLnq4XW3y12Thl5pKU-tZT6-UNtnfM/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1bda0547a00a94cee8af6a7f619d3304e2fe253c5a59e26ba1874cbdff547382
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections