Overview

overview

10

Static

static

10

f206cdf3fa...18.exe

windows7-x64

9

f206cdf3fa...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f206cdf3fa292178911546b3fb8e6153_JaffaCakes118

  • Size

    290KB

  • MD5

    f206cdf3fa292178911546b3fb8e6153

  • SHA1

    4a8112121d2b69267406b33616455ef82b80db66

  • SHA256

    7b08a51d91c9a83a973a8e0cca7c2b4ef75a534ae164e05fac676109c0dc9f58

  • SHA512

    a7c4d523a2005bbb8eec4c5e7602b1df1231d8f15bd781d8260450046ff7cf634977d2b1e60389c7e241850e6a8a740a79cf6cb827d69224386ae81d184169d4

  • SSDEEP

    6144:3WM3RBWNhucqTUfEakkTSr1jW/acLhC4qfYTmKbAoqTV:3WIpcoTKfqswoqTV

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.eximogruop.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    %Xw)k%v9

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f206cdf3fa292178911546b3fb8e6153_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections