General

  • Target

    60dcda7c7080a449cfb175b183073c33dfa74bdad5d94e5044795bbad2e69875

  • Size

    238KB

  • MD5

    1bfff173fe51c613fb1d9a44776972c7

  • SHA1

    5d1d7979c8146a1ddd72783e6a0c72c42cc96d4f

  • SHA256

    60dcda7c7080a449cfb175b183073c33dfa74bdad5d94e5044795bbad2e69875

  • SHA512

    8afef815f98d074aec79d26bf035137e1cb8c8d374dc6e120ed9a27742bfdc953a0f54242789744635028c57f47214188a5da23d50ff108d78095577eff131cd

  • SSDEEP

    3072:GdvDPrfY7wcwJwtrkQdYWkybW9nG5oZBCefwK:0vDPrfcwcwcusW9nPCU

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.fosna.net
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    (=8fPSH$KO_!

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 60dcda7c7080a449cfb175b183073c33dfa74bdad5d94e5044795bbad2e69875
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections