General

  • Target

    b64df856d6be53135a4efab60e92b60490024bd04f0b0a1f01e4a2228f38b37d

  • Size

    215KB

  • MD5

    cd1b3db07a7b6822676c04cd7aa0a325

  • SHA1

    c90ed516fb49decb0279a4b94c887418082297ad

  • SHA256

    b64df856d6be53135a4efab60e92b60490024bd04f0b0a1f01e4a2228f38b37d

  • SHA512

    c87c506b9aa7ddcaea99f5c111ea9445849ceb249f690a05d1dc81468dd7d161cfa001f2106b7eb1fdfc6e57c0eb8dc9892c7eda05fa3bfac267d9c48bb0536c

  • SSDEEP

    3072:hmQLOzj00HNa3HMIUVUhnIJLeFf3u1kMsgfJXts4DX4HYL5aN7Fq1ISBkKYDByZ:hsK3spUOyF5MxPsWXeYVa9tHDB

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.zuarakltd.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    CLy@DAi2

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b64df856d6be53135a4efab60e92b60490024bd04f0b0a1f01e4a2228f38b37d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections