General
-
Target
rPO098.exe
-
Size
245KB
-
MD5
61849b1ba5ede0158c12e6e104d493b9
-
SHA1
e04fddefe128ceed9664bfcb69b62ddda3872a8d
-
SHA256
8ec512f3e203cb6c2156b21d8c572f4ad035b47e594ad3db984cad78529ba8d5
-
SHA512
5581099a0373bed67a1411a07aa2739a8599ab9a61fe4d6ea0bb3e10e438c708182521ca7c2a5d180941d30559d15f9f7f66f2a2738153274f63c81c7ae53172
-
SSDEEP
3072:KYfrPTPMqevKX2U2c9hntwABAtlYv+GO5yzcYbi:NfrPTPMqevKX2U20rvAlAThck
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.greaterdoha.com - Port:
587 - Username:
[email protected] - Password:
baller01baller01 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
rPO098.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections