Overview

overview

10

Static

static

10

8e94a63efc...92.exe

windows7-x64

10

8e94a63efc...92.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e94a63efccb1b5e833af767d0eb34d8e4515fb12287cf37067a631f012de392.exe

  • Size

    244KB

  • MD5

    6ea183b78793bb1ff77e24eb6bfb0b32

  • SHA1

    29137c4c81ccd7234e8c68a586633bc4b90ef8ca

  • SHA256

    8e94a63efccb1b5e833af767d0eb34d8e4515fb12287cf37067a631f012de392

  • SHA512

    2312c137b37c86e3a7e2f6948f9c6f85b537160f3cd9cc913c18d1109f735bde7f847e2af0f21fc565206fa88b0b8edd2c409cec96d23297c8fbfa47668c17a9

  • SSDEEP

    3072:FJNPKOKWKquufYaJCHEw2PEunaj5ltSYq1J:FJNPKOKWKquI1QE9PEuadST1

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
    agenttesla
  • Detect packed .NET executables. Mostly AgentTeslaV4. 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables referencing Windows vault credential objects. Observed in infostealers 1 IoCs
  • Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers 1 IoCs
  • Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
  • Detects executables referencing many file transfer clients. Observed in information stealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e94a63efccb1b5e833af767d0eb34d8e4515fb12287cf37067a631f012de392.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections