Overview

overview

10

Static

static

10

77fd58789c...d4.exe

windows7-x64

10

77fd58789c...d4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a5e2d8aa014a6348667249b07e55fdce.bin

  • Size

    82KB

  • MD5

    cca757b0486d1e2b339addec9af7fe36

  • SHA1

    dd9d576b856a80fd9e122cca57e62cfefe90fbaf

  • SHA256

    ef739e6288037ca4e3d6f3c523427004568cc4e52615fddd8bb294a1b447b137

  • SHA512

    974ad11f9104c591959c8d068f39090cb290a386a577034092332bb80043dbe8d3bef1cb3d14620e75e359f169a7551e82a142620eaab30a9ee4ca34200d6567

  • SSDEEP

    1536:GC4+HNW1Hoe7qQMdWBtgV+jiknyLeJfSWSMap1GRonQLE5nv+0iKReD/f+Crb:L4+Hgoe7qZWbY+jX0eNRSMUQLEkDD/BP

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://inhanoi.net.vn
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    ^TSt3!FK$UBA

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a5e2d8aa014a6348667249b07e55fdce.bin
    .zip

    Password: infected

  • 77fd58789cadf2f53c7a9ee50f3a80baafb6fb8d7567afb4d66c081fef0857d4.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections