Overview

overview

10

Static

static

10

b422975b2b...18.exe

windows7-x64

9

b422975b2b...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b422975b2bc5dce001dcc23565f2cbca_JaffaCakes118

  • Size

    293KB

  • MD5

    b422975b2bc5dce001dcc23565f2cbca

  • SHA1

    6f27348c25b0e0fe41e3265c49a7f4d546f29861

  • SHA256

    8c6c648a1e0b237c8c8490907f1e1e09a4e2b145970a30155df7c557987dc107

  • SHA512

    3a561def2838652e266060a14e7647293658cb83966df86dab73aee4ae514b30cabe8dc3baf2832dc48b6e4a209cf458e2901b5314cf888541c1edb86b4d4f10

  • SSDEEP

    6144:HlJhngLhSMKjvI1Zv0/Ru8204mUeVEU+b/oyT7:HzZgLhZIQ1Z04mZyoyT7

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.zeyiti-sa.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    ZCu)LIW6

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b422975b2bc5dce001dcc23565f2cbca_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections