Overview

overview

10

Static

static

10

8a57447139...dc.exe

windows7-x64

10

8a57447139...dc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a57447139ca6a5f563abc8544fda97c1571566e4b4b03f33e4e7bfe9e8bf4dc

  • Size

    3.0MB

  • MD5

    e74b0149b454769207a04bcc3ef2c824

  • SHA1

    aacbd79a6e1cc7e857fea2da0f5c85a4c1346bdd

  • SHA256

    8a57447139ca6a5f563abc8544fda97c1571566e4b4b03f33e4e7bfe9e8bf4dc

  • SHA512

    4a0dca7d470297059220c4f80f8f1f69d3359ebef7803a107901ae022f5d1462600906523ac4d7652d2c803168daf924db3df2a3f4d4e9723da752066c55bf4c

  • SSDEEP

    49152:cRtB1R3yURtB1R3yWRtB1R3yiq9J2EaD2R4jee3erIxq9J2EaDH1A1:cRtB1R3/RtB1R39RtB1R3zrv2oee3erB

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.haliza.com.my
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    JesusChrist007$

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8a57447139ca6a5f563abc8544fda97c1571566e4b4b03f33e4e7bfe9e8bf4dc
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections