agenttesla | 0e5780e67bb7a9e84abfcab88ecae382f59b66905ec375ba0e8f7f7a3c3dac15[.]exe | Triage

Sharing

General

Target

0e5780e67bb7a9e84abfcab88ecae382f59b66905ec375ba0e8f7f7a3c3dac15.exe
Size

239KB
MD5

7481dee30f768b696327e2894a93c7c7
SHA1

659c5fa6af2a791925c7ef85db0a657e06679b15
SHA256

0e5780e67bb7a9e84abfcab88ecae382f59b66905ec375ba0e8f7f7a3c3dac15
SHA512

28ac76fbe68ef534cab6d47a895f4df070d03421b616e6b2cea4327ed1721e5a2685bb658cd8458a8ee86ac3f5140660f6e6a68d01298e517e4c54dc51493ce0
SSDEEP

3072:cbKktSm6GyD5hxEktOZ2dGde1zLsqGAHIy5CxWI/goM:cb7Sm6GyD5h+e6gIqGAozWIY

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.pakpearlintl.com
Port:
587
Username:
[email protected]
Password:
pakpearlintl.com
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e5780e67bb7a9e84abfcab88ecae382f59b66905ec375ba0e8f7f7a3c3dac15.exe

Files

0e5780e67bb7a9e84abfcab88ecae382f59b66905ec375ba0e8f7f7a3c3dac15.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ