General

  • Target

    b25826c714edf291de4ad955d9bcce66_JaffaCakes118

  • Size

    300KB

  • MD5

    b25826c714edf291de4ad955d9bcce66

  • SHA1

    11a22b520e850e95cc6d65705c0e6663d071aaef

  • SHA256

    9ba971995e56c40ccacd47961c48d85a94c4e41544567a9dc769c82c5027cbef

  • SHA512

    ffd3988f0a8a5d84ce7517bf51063138f8ee2632a830df80308d3ea46144c787c3627b4181469f1512eec8f27870b742b7967dbe180658f1a89fac31a23f25fc

  • SSDEEP

    6144:f5TeIc43ejhqp+JfdIdPx3I/zu8grBnhqeT/H3YeK+xZyZYqypD3kDwULsb:hTNGJVgZ3YeK+xZyZ0B3k

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    server257.web-hosting.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    mUf{4ARHRFqj

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b25826c714edf291de4ad955d9bcce66_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections