General

  • Target

    295bad4a7ceba0308b6209172c99f051d30c2c21136066b949f72d9ebe39527b

  • Size

    236KB

  • MD5

    18361ad5f0420e890cadedd4316612dc

  • SHA1

    d4d4d75cd04344c708bbec4cb2e0bad848c9df4a

  • SHA256

    295bad4a7ceba0308b6209172c99f051d30c2c21136066b949f72d9ebe39527b

  • SHA512

    a56af21355b88c4805aeb596db6a40862678a5693947393f821d924a2a66a0a03490aa474d1047e274cda2ef65b79dda4156e39cd3836f58aa1592ab98cc1766

  • SSDEEP

    3072:qoHXPfnIPGO10mhPJAWLSwxhmUD+cHkFe05pChDiAY:xHXPfnIPhPGSS6hma+C/fh+

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.midhcodistribuciones.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    ,A7}+JV4KExQ

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 295bad4a7ceba0308b6209172c99f051d30c2c21136066b949f72d9ebe39527b
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections