General

  • Target

    f28596a22b369c545afc0e7429b25e76b058dd2c52227d0e3bbe6137259778df

  • Size

    244KB

  • MD5

    61ac354efe49a07212d2d438e9ff3f21

  • SHA1

    10e53c19871633d7012f3b5e0fde072ed0207fb1

  • SHA256

    f28596a22b369c545afc0e7429b25e76b058dd2c52227d0e3bbe6137259778df

  • SHA512

    6920f2821519d5be1b0beb5f7043f05268a193fc4401e15f050167472940c46515158f9b74be469806d2105f0e7cc84d5c89025fd776e5134bc737f41f232b96

  • SSDEEP

    3072:0E9GPoG1F91NltoTGY7a4bczoIX7WTGGOU5Um5M9GCQ:0UGPoKF91NltorgoLKFy5Mw

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot7220431026:AAHszs0XzPcajloTXlLJDVKab99uNUvPaok/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f28596a22b369c545afc0e7429b25e76b058dd2c52227d0e3bbe6137259778df
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections