Overview

overview

10

Static

static

10

5b4107e5bc...38.exe

windows7-x64

1

5b4107e5bc...38.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b4107e5bc4904bb7574eba96a6532c8b973826fcf3ee6829ac4982709851338

  • Size

    301KB

  • MD5

    467199b4716ab8eb46f2d49f527220e9

  • SHA1

    56b8ecb6e895698aa871ee7b9dc19d5a69547512

  • SHA256

    5b4107e5bc4904bb7574eba96a6532c8b973826fcf3ee6829ac4982709851338

  • SHA512

    cfbe475ca4c17ac4af751ada6199d33459035067417549b2a66313ed8590f5b429d95d02eba8cee5a86de7e1bab8b2171dc28655c8977b1139eb43fde873ac1c

  • SSDEEP

    6144:2Gzyk5qs33ZLmSt6wQke54OjIF6kId33dLpkynb:2G5P6wE+2d33dLG

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.cosmocert.bg
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    pJbC4;%{xBNm

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b4107e5bc4904bb7574eba96a6532c8b973826fcf3ee6829ac4982709851338
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections