General

  • Target

    10d109eec0696eaa976a8c902505d948df0e739fc6f95bf24515bdf81e0897db

  • Size

    278KB

  • MD5

    7f022efa27ff3f5a630cfa800e64808d

  • SHA1

    9ce8e6e690c15bf37cee98bb0f57cd2e5a40a0be

  • SHA256

    10d109eec0696eaa976a8c902505d948df0e739fc6f95bf24515bdf81e0897db

  • SHA512

    627e3fc8ae733aa90478c52c42046aa0f418673a6b2793ffbfe573f29baf1e4f571bab1c3add78de4eb6acd82b70d5c17e75e2cb8600e46795caf6e2526689fd

  • SSDEEP

    6144:xztV3H/SBR6/i+TceA506d8WwDdvakFICg:F3H/8R6q+TceA5UDtagg

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    mail.chenklins.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    7AY8Uj[tEN)a

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 10d109eec0696eaa976a8c902505d948df0e739fc6f95bf24515bdf81e0897db
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections