Overview

overview

10

Static

static

10

97dfbf8a93...18.exe

windows7-x64

7

97dfbf8a93...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    97dfbf8a930bf037749c0da0b5c11b1c_JaffaCakes118

  • Size

    292KB

  • MD5

    97dfbf8a930bf037749c0da0b5c11b1c

  • SHA1

    55ae8ee2ddd24fba4a81184eb9ee6a042ef65b15

  • SHA256

    b7513580bb8eddebedf6c8f5add12b5a3271b0b6ee42fdf3edd0e8c4e6519944

  • SHA512

    f34fba7950ec661b67a9945380cfb86ee7ffe89c6659ca47ba337866441f31e004c66a2fc1f5d4331ca6dde5974d20b6bb1b7247e328dfbe5a85f115b44daed9

  • SSDEEP

    6144:mBJd6c+h/WA/ZBJXrpsKZjJWXTBN333eLYmMDUDb7WOE:mLd6c+h+A5P4XTLn3eLYGWOE

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.psturyana.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    nPp^OJV1

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 97dfbf8a930bf037749c0da0b5c11b1c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections