Overview

overview

10

Static

static

10

b0154c3d19...18.exe

windows7-x64

9

b0154c3d19...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0154c3d19e57f256fad0fb8a2caa8c3_JaffaCakes118

  • Size

    281KB

  • MD5

    b0154c3d19e57f256fad0fb8a2caa8c3

  • SHA1

    f93bae30ee0ba25f632e546dcf54e5729206e9cf

  • SHA256

    1dbe5199ccbe79d6f635bad816dbf97029b6f4eb8674d95b9842213d0d779dd6

  • SHA512

    07dd82b9d3a1b880bee01d64448fcad8dae1d65e8ef3f73925133073d4a43837f11512e497d621d5b54c04cd1188e4fa615de523304f82ad8b17547ead42b445

  • SSDEEP

    6144:4AmKaWSjATOE9G3RdWqxh9lDqUi19UBc/Ifo1OH/falvrKGGOb9:4A3aWSjREcaoU0WMomI

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.brink-eu.org
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    crxOPaA2

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0154c3d19e57f256fad0fb8a2caa8c3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections