General

  • Target

    7aa11b2dc6c904e9e59e46b6c9ce57ef95f21e26e8a6e81cafdd50fc2bd6b982

  • Size

    247KB

  • MD5

    448db08f687f9f319b82bfba063b2d90

  • SHA1

    6a9b9a085922b7dbafcb6917372fde221fbfd2dc

  • SHA256

    7aa11b2dc6c904e9e59e46b6c9ce57ef95f21e26e8a6e81cafdd50fc2bd6b982

  • SHA512

    d0517761ffe6e49d80a5bbcfa2fd6774e9719375269f318e37795b302741b3b3f0ca4a13de4d063f8626e78b87defb7aae66231b7e8357e70c5c735db80d6b7f

  • SSDEEP

    3072:EI1dJ1pdUg08AthscRW10RYGJMn27JO5WLM9pVosvO1:V1dJ1pdUg08AthscRXZe27JpI9pS

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot7395059441:AAEvjWlabrWZ-OUf1AcyO0rP0W-N1Nd5zUs/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7aa11b2dc6c904e9e59e46b6c9ce57ef95f21e26e8a6e81cafdd50fc2bd6b982
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections