Overview

overview

10

Static

static

10

af74257b48...18.exe

windows7-x64

10

af74257b48...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    af74257b48f7e316ed79f540f3058110_JaffaCakes118

  • Size

    282KB

  • MD5

    af74257b48f7e316ed79f540f3058110

  • SHA1

    bf8d7ddac7dd49f4b5c125ddcd648473b57d48da

  • SHA256

    8092aa4ec701f3b8fa7e3afe728c9f257cbe9ac9888578edc1e22f17c3799d80

  • SHA512

    1da1bc4a5dab4c354365dc7a19e3f8b50ad9bdc3f897f88cf680ed790531466370a9a18031a6f2e2f6840e1cee57f95c7d6b574d27f66c48942a6434fb7f812c

  • SSDEEP

    6144:l5XC2ePKbXuCtp+GS3Joh/jVJyjicD7MbN:7CHe+vGOiJ+i

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.royals-engg.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    WeLBYCT4

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af74257b48f7e316ed79f540f3058110_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections