Overview

overview

10

Static

static

10

86feb04ef6...71.exe

windows7-x64

86feb04ef6...71.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86feb04ef60fa02ba3640c3b355aa6626b7ba900518c3efc0948b80728eda571

  • Size

    256KB

  • MD5

    96458ecebbeb616448e3684c4ad90b21

  • SHA1

    e435d72e82e37533f8baf61312780c83c38a28db

  • SHA256

    86feb04ef60fa02ba3640c3b355aa6626b7ba900518c3efc0948b80728eda571

  • SHA512

    ee86e380d0a437d696f86ef5114d9e8a8014d34709a0f0ccca061fe47266983015f68ba50ef10390b08b1e371b655164d87051fbe4b26acd446e3b8d7efb5ff5

  • SSDEEP

    3072:wHxuymielq1mdbSbmx+pt7G16d5XWU+RgH:wHxuymielq1AbS8+G8uUb

Score
10/10
agenttesla

Malware Config

Signatures

  • Agenttesla family
    agenttesla
  • Detect packed .NET executables. Mostly AgentTeslaV4. 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables referencing Windows vault credential objects. Observed in infostealers 1 IoCs
  • Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers 1 IoCs
  • Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
  • Detects executables referencing many file transfer clients. Observed in information stealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 86feb04ef60fa02ba3640c3b355aa6626b7ba900518c3efc0948b80728eda571
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections