agenttesla | 8958853f5e140dac3aa98f78e9918249200f4daef1214d63037cc987ecf0ce5c | Triage

Sharing

General

Target

8958853f5e140dac3aa98f78e9918249200f4daef1214d63037cc987ecf0ce5c
Size

188KB
MD5

43972568d3e948dcacb6cbef38191fcf
SHA1

2485928cd4ae702c14382ea262c15b1d10ad64b1
SHA256

8958853f5e140dac3aa98f78e9918249200f4daef1214d63037cc987ecf0ce5c
SHA512

20c3a0d2e1735c69d4f4ed92737781cdf1298944d65414e55d41399ab108bd97f1c5b4009f8db2bbcca6f59ee694805f299228b1a3787a4ab796f2da0fa08fc6
SSDEEP

3072:xXYaTyI5POwAM6lQBtw4LdIYi8k4lVXc7RX039Vl7M8B:OYyI5POwgirXlyS39V28

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.yandex.com
Port:
587
Username:
[email protected]
Password:
ubduipymcemperot
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8958853f5e140dac3aa98f78e9918249200f4daef1214d63037cc987ecf0ce5c

Files

8958853f5e140dac3aa98f78e9918249200f4daef1214d63037cc987ecf0ce5c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ