General

  • Target

    022fc9659def7935be68d2d65dba0556c6a9cffe4f61b9cf165c276a1ff8d109

  • Size

    244KB

  • MD5

    afa38a25440cc46c9bfe6954f4dec756

  • SHA1

    14653bddac5ba76bd6029f2e46779adca8176603

  • SHA256

    022fc9659def7935be68d2d65dba0556c6a9cffe4f61b9cf165c276a1ff8d109

  • SHA512

    1200bedb5174f8ee621bb73a4ea793399d57f01bb408800f2fe7f6c03322e3476e07932265ee1e28f2638607946aea3aa52858c5b25941e10764dd065111b4d1

  • SSDEEP

    3072:Jbc0QttlNV9VxBbUb0T3Pg8DrDhOd+BCTlD33m5ZfGXCZpr/:Jbc00tlNV9VxS0oShOflD33AuXCD

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot7318150589:AAEpgsBBmPEQziPf8NBf-0xTYYm9iGVvHTU/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 022fc9659def7935be68d2d65dba0556c6a9cffe4f61b9cf165c276a1ff8d109
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections