Overview

overview

10

Static

static

10

e59406cd43...18.exe

windows7-x64

10

e59406cd43...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e59406cd43db5001c87fd4a580354eb9_JaffaCakes118

  • Size

    383KB

  • MD5

    e59406cd43db5001c87fd4a580354eb9

  • SHA1

    6476b487ae9c588a02f3acacb94beef0065a08e2

  • SHA256

    0c4adf8627fd761e687d134f95d6110a56e8221abe67d9007866f4c1c7a4b2c8

  • SHA512

    1679d655ad60bcff33427c05c60d63fa286b3becb11a66ec60bb4ee2933dc512d1127555e7b1f31f960fe3114d5b3081c8fc01c2ed6fb237ecbcf55643d87e54

  • SSDEEP

    6144:5ykvbXYSOFTH/N5EExaJglfyceOfiw0mn7lcvo905qSrEtU+:JJOV15+G9ycetwL7lC40hl

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    terminal6.veeblehosting.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    D5%&cLkPJ{rW

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e59406cd43db5001c87fd4a580354eb9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections