General

  • Target

    1cb0f1a6d37272d814a907e94972e26481ed48ef79f3ac005d316b3d1b659ab6

  • Size

    159KB

  • MD5

    31365a39713a547510fce5d02f635927

  • SHA1

    2cfff85620686ee26f250edeb6a04ab38d479545

  • SHA256

    1cb0f1a6d37272d814a907e94972e26481ed48ef79f3ac005d316b3d1b659ab6

  • SHA512

    bc42bf620be2e2885b40eb03f3d6e461a42211dc06b0f714c8590b9ccb95bc33d2dab20e11f798d192adff508121e3949b41f1155331e49516ab33fbdb9c51cc

  • SSDEEP

    3072:AwDfVQGGv4NnclURjbvnYdHEf1lbnALNVsmUVOAJvp3MZ:AK/GgulURXqkfXbnALNVsjMMv

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    us2.smtp.mailhostbox.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    RV*YRUf2

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1cb0f1a6d37272d814a907e94972e26481ed48ef79f3ac005d316b3d1b659ab6
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections