General

  • Target

    906c1863777e91ff508ccb1758ee2f7bdec9cb59f0c251e0a1ddd64d9cc82548.exe

  • Size

    243KB

  • MD5

    f0584ec3946ed12facabaae4789235b7

  • SHA1

    f58a9f4ea1fb7aa409e029fcb0c976dc680ac034

  • SHA256

    906c1863777e91ff508ccb1758ee2f7bdec9cb59f0c251e0a1ddd64d9cc82548

  • SHA512

    ba3c56dcbf49102b7293f6e1e2543668ffc700a352208be48a388cdf03a09f85b7b7366a4e58f6d0f629d76b812822fa5a0efe8ffdb9c2010252e14d94515f19

  • SSDEEP

    3072:rfznzvDu7CYtOsaPDUGAaVIPhVBrP2xtezLAf5spKS6hc:rfznzvDu7zOsu1IwLefAUKdh

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    mail.expresscargoes.net
  • Port:
    587
  • Username:
    noreply@expresscargoes.net
  • Password:
    QAZ1234P0#WA
  • Email To:
    officerjohnbuckley@gmail.com

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 906c1863777e91ff508ccb1758ee2f7bdec9cb59f0c251e0a1ddd64d9cc82548.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.