agenttesla | 0489878f0f876c3d1c5f1bf860fe93c90ea851a55316a9f3f8294f1a34369fda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0489878f0f876c3d1c5f1bf860fe93c90ea851a55316a9f3f8294f1a34369fda
Size

245KB
MD5

cb96dcece5f63ad47f2e92ee6ae493c5
SHA1

e652368d3e26db6dfb52951fee5c4e420b934c24
SHA256

0489878f0f876c3d1c5f1bf860fe93c90ea851a55316a9f3f8294f1a34369fda
SHA512

13d549256591c314472a6880d7745ef34a8790a6dab0979f5a8ff072458f1f432be891a8864d01c2479c7996014a2bc7bc835fe744ccd89b3ddc5312ad5467f9
SSDEEP

3072:jndBTUQkoU0y/nYh1oJky9AreXBty9opWx5rWBgmA:jDUQkoU0y/nYh1I9By9opWWB9

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.softtricksmedia.com
Port:
587
Username:
[email protected]
Password:
soft#!7som7
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0489878f0f876c3d1c5f1bf860fe93c90ea851a55316a9f3f8294f1a34369fda

Files

0489878f0f876c3d1c5f1bf860fe93c90ea851a55316a9f3f8294f1a34369fda
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ