General

  • Target

    cb118d6f48dc098959728a99f7f8d44ccb928947ee51c72b6cd9aa24636e2c33

  • Size

    233KB

  • MD5

    896c33bf85e5f60a398c92b17a3169d6

  • SHA1

    3be8f8aff612dc07da40c2a23be4d85d8ddaabe0

  • SHA256

    cb118d6f48dc098959728a99f7f8d44ccb928947ee51c72b6cd9aa24636e2c33

  • SHA512

    58e10f667cd1fabb43db0034e9f73e5feaed73f0d2c6ace3400300df9b0823daf2a9e5c0584394b8caf700e6d45b95efe4ef4bf4545f404da1cc6def1d401b55

  • SSDEEP

    3072:ph2fwLmMw0w88DQlsx9fofTtdicmimwBi5X0JfCZGo:0wLmMw0w880lsPflcmimwBSWfCG

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://youngsnupack.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    5vwEm4pbzwIz

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb118d6f48dc098959728a99f7f8d44ccb928947ee51c72b6cd9aa24636e2c33
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections