Overview

overview

10

Static

static

10

3d6b769584...18.exe

windows7-x64

10

3d6b769584...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d6b7695846071abddc7cf9e534ff12c_JaffaCakes118

  • Size

    292KB

  • MD5

    3d6b7695846071abddc7cf9e534ff12c

  • SHA1

    08643fe13fd0c7bafa90c0bf0d3a6ccb463f67ab

  • SHA256

    33a127a3ad4e44a6f1763b9f7dbbefeae522629f9492d7964f2840862252cc5f

  • SHA512

    716f7736b7e629c755683ec80de9774101a4877881c7272857be0c0ddce43d44d6cb6a55bf9abe5b53e346f418945e966fbbc18df631b563338b4ea44d01a131

  • SSDEEP

    6144:kASIThwyWLtgfgmfRScdSt//vGCOrjHPqcbzo2T7:ksTmDapSqEXtGo2T7

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.eximogruop.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    %Xw)k%v9

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d6b7695846071abddc7cf9e534ff12c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections