agenttesla | ee35026b2547c709ec8f10151a4658913b25dede50c56d6e2f6704f22d09f85e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee35026b2547c709ec8f10151a4658913b25dede50c56d6e2f6704f22d09f85e
Size

238KB
MD5

bae5399eeea2d66217cc9d76af8ef1f4
SHA1

e1499715abb2eba2fc7b6446b502f76169463658
SHA256

ee35026b2547c709ec8f10151a4658913b25dede50c56d6e2f6704f22d09f85e
SHA512

2f72e39337a4fc6ff2528e06da873d297f303fe6fa5d267f9ef486daffdae69348838a7f4550e056104dbcc8875fda28f2a3b9eaf53f62b70a25513206b35a16
SSDEEP

3072:d7nPDvllt/nha/5KrgvMf3S/h6JAU5Xq5Huxa+PA:1n7vllt/nha/ygvMfC/h6JAxH4

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
us2.smtp.mailhostbox.com
Port:
587
Username:
[email protected]
Password:
w#chNV#1
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee35026b2547c709ec8f10151a4658913b25dede50c56d6e2f6704f22d09f85e

Files

ee35026b2547c709ec8f10151a4658913b25dede50c56d6e2f6704f22d09f85e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ