Overview

overview

10

Static

static

10

304ef59f77...6a.exe

windows7-x64

3

304ef59f77...6a.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    304ef59f776d719daedc7d19c1c50713f90a8e92050d57456d30d1ce73ec126a.exe

  • Size

    233KB

  • MD5

    419884a79a8c293429a14a0613c0ce62

  • SHA1

    698f2c221fac46ef0215123cdf76261442e8563c

  • SHA256

    304ef59f776d719daedc7d19c1c50713f90a8e92050d57456d30d1ce73ec126a

  • SHA512

    bab6af7185cb37e34f7195333204a5f81d268bccb7e24f91c27f7a9188f8e1c817d770726daeb1591549bf5b7d33c3a7e50ba6f82cdc536a14e53864754bf7e9

  • SSDEEP

    3072:mW1X0w8AUsM8ciO0dQh5dBw0GbO5WOEEAM5:r1X0w8AUsSiO0g5dBw0GbsES

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://beirutrest.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    9yXQ39wz(uL+

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 304ef59f776d719daedc7d19c1c50713f90a8e92050d57456d30d1ce73ec126a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections