Overview

overview

10

Static

static

10

a16782a5ea...18.exe

windows7-x64

10

a16782a5ea...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a16782a5ea9ab3ad0e71e61db261f550_JaffaCakes118

  • Size

    213KB

  • MD5

    a16782a5ea9ab3ad0e71e61db261f550

  • SHA1

    92e12f2b986cf4074510a1ade83b918914e41aed

  • SHA256

    ba5cb8c80d289a15e47f3d55d4a26cbad451b9f6be8a26fc00ee4d379c037347

  • SHA512

    03aac78d3688cde53c424f2b0a7188ee7fb6369dce43700c620d2a3be12f2d8aa17b4aabc6dddd4edeaae6268586ced4f5592557bff9055af033b408bdbce847

  • SSDEEP

    3072:b2Q1Vl71WDyUAYWeFpVxXCzqNPx+tAthI134r4r0E1rYYQEa13swoErq:bVlo+UPWeLbP0tAXh4r0EF/als

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    khan.hosterbox.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    ramiboy64

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a16782a5ea9ab3ad0e71e61db261f550_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections