General

  • Target

    464004e326e0b0605551d680aaed661d9602eeb8517ef246afe829fbfabc9e38

  • Size

    238KB

  • MD5

    446684e857056f9681466d76f31809d8

  • SHA1

    ddca63461ed6566fdfc9b9e2d6b39603bca15ff4

  • SHA256

    464004e326e0b0605551d680aaed661d9602eeb8517ef246afe829fbfabc9e38

  • SHA512

    c68083411a76b1a032bb68965cd472987999b7deba38a2acf5672a2f5c0e8d828c76deb4142934e40ecff0707c2e82beaa043775242fbf0fdf8affc84ccc4475

  • SSDEEP

    3072:SdvDPrfY7wcwJwtrkQdYWkybW9nG5oZBCefwK:ovDPrfcwcwcusW9nPCU

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.fosna.net
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    (=8fPSH$KO_!

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 464004e326e0b0605551d680aaed661d9602eeb8517ef246afe829fbfabc9e38
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections