General

  • Target

    9cd432ba41df32427d09cb89de8e391241f2847a9ee33ac03922140b5506123c

  • Size

    239KB

  • MD5

    f35b415e7db44b97ac8a26b769744c33

  • SHA1

    f42a57dd923e0ac3ea875dea0a3255047357053e

  • SHA256

    9cd432ba41df32427d09cb89de8e391241f2847a9ee33ac03922140b5506123c

  • SHA512

    f919fa525d196419f9aec8ce04da3c2886ae8e09b470cc8ed7a33dfcf9ace7a152274ca873ed3f5919054cb45133ece12d3d97bef9d7edc003e708bd65b329c3

  • SSDEEP

    3072:AVgrpqdAcY8gg3yV/nUGukY5I3UZUmYWB5BCQv5ygvW9/R:blqdAcY8gKyKGrY5WdXo5BCQ/vG

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.elquijotebanquetes.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    -GN,s*KH{VEhPmo)+f

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9cd432ba41df32427d09cb89de8e391241f2847a9ee33ac03922140b5506123c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections