General

  • Target

    48bbbcfc4feb7b340f79fad4216adf7ac6b799a16f9c663784e0100ab44f8632

  • Size

    247KB

  • MD5

    e559e786f9fe168805fa606256d7e238

  • SHA1

    1c650a57a2e2406d68b7e1c69aa091474c0e99df

  • SHA256

    48bbbcfc4feb7b340f79fad4216adf7ac6b799a16f9c663784e0100ab44f8632

  • SHA512

    0e968871776fc010d8a869634f984d58681cd5a6b1815a5f812829a86c55711fe66004c51f4155818f9c3f73a8d01cfd7d2b747a27432d70ae7f6f5a107abbab

  • SSDEEP

    3072:b5QYMAsYL8wgs3tgE6p9PktfqwMy0IhQ/5ePRFgJBE52f:VQYMAsYL8wgs3tgbp9PkBqQ0IqQ5FgL

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot7390139954:AAFw-89dzufZnN9iQ-qMJ7xuGsXRrzvXAEI/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 48bbbcfc4feb7b340f79fad4216adf7ac6b799a16f9c663784e0100ab44f8632
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections