General

  • Target

    1daa51b82be88d593066a9da909631155933ea91fea935b61237da5c9a06c105

  • Size

    247KB

  • MD5

    672cf15d4720345243dfa270a7a17b6b

  • SHA1

    2c0dadf5d93112248d71cf5ea397ab82fef01094

  • SHA256

    1daa51b82be88d593066a9da909631155933ea91fea935b61237da5c9a06c105

  • SHA512

    726aecbd716d918122cd0814b41c0dc8e5eba4eea64d8771e557380f993995769368cc85cc841427998f06260bee52465464281ec5e8e277ee8b7bf6dff68cea

  • SSDEEP

    3072:SFCgMwEQ1c2xf75QNcVPsIiD7nC955SODpZkNVm:OCgMwEQ1c2xf75QNcdsJGQODL

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6920956123:AAF5MVKcRQXhI4WbvmFoIFU5yl4eW32KEn4/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1daa51b82be88d593066a9da909631155933ea91fea935b61237da5c9a06c105
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections