agenttesla | 1ac5f1be7dde3ad3245157584f574f240c4f1ecf30ce6ac926f4976a20296317 | Triage

Sharing

General

Target

1ac5f1be7dde3ad3245157584f574f240c4f1ecf30ce6ac926f4976a20296317
Size

242KB
MD5

b51ef8922513ec24c767622165b6ea94
SHA1

22cddd29016857ecb9c1efee272c1db3ea3633ce
SHA256

1ac5f1be7dde3ad3245157584f574f240c4f1ecf30ce6ac926f4976a20296317
SHA512

3355f6d6e9d492971070a0e763f877d7581382055f9a082c9b154bcc3866f295e6cd4ba9573ba71aada083dbdf17b9fcbe374b652f1a19d8a3a7f19fba8c2d11
SSDEEP

1536:AFmTfMP/X3fL9CBqVLklqOqIVjXhlkmvT38zJr/J/asY5jf+9qFY6FBAS:AF9P/X3fLZLkfqQzah5Y5SUY6FBP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
premium162.web-hosting.com
Port:
587
Username:
[email protected]
Password:
Look@oursuccess247
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac5f1be7dde3ad3245157584f574f240c4f1ecf30ce6ac926f4976a20296317

Files

1ac5f1be7dde3ad3245157584f574f240c4f1ecf30ce6ac926f4976a20296317
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ