agenttesla | 17d298032fdb169534037678f8bb8d20d1b4b34df3fec8cd5b0b627ff8b41ca8 | Triage

Sharing

General

Target

17d298032fdb169534037678f8bb8d20d1b4b34df3fec8cd5b0b627ff8b41ca8
Size

168KB
MD5

9dcc137f0527d988ce6dd8f56a2dc19f
SHA1

32ccea202a9e1689cc31eda4f5a43a49feeae93d
SHA256

17d298032fdb169534037678f8bb8d20d1b4b34df3fec8cd5b0b627ff8b41ca8
SHA512

2b672f9bd4921938b65330c9049c1205210f2d3daeb8392dbb70adbbed06bae2ac304275672ab77de87a9056ce657810f176e2f06a2dac44c3cf4f333c9495e5
SSDEEP

3072:PLGUxVJwV6LPwXX6IztBJYK3PS1UU4OQmEZR6Enok6tu:5VK6ktgLQmEmEok

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.agentbetking.com
Port:
587
Username:
[email protected]
Password:
Temple390.
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17d298032fdb169534037678f8bb8d20d1b4b34df3fec8cd5b0b627ff8b41ca8

Files

17d298032fdb169534037678f8bb8d20d1b4b34df3fec8cd5b0b627ff8b41ca8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ