General

  • Target

    5da727c5423f49b759296a41cc055aa3b881fd69f82aeea21fffb07bda3227a3

  • Size

    236KB

  • MD5

    a2e5c86b36cf3bbde3c92c890988b869

  • SHA1

    c45fc0cc41cbe4022e9160317640b8b5947ad762

  • SHA256

    5da727c5423f49b759296a41cc055aa3b881fd69f82aeea21fffb07bda3227a3

  • SHA512

    44fdebd123cf29786bb8d9e038154901b35e64f01f8f20bdaf0662a06f94a0ad5755d33baca2bea14bc5ce7463f0e6d38653808fd857c6915c3f12383cfa7cb2

  • SSDEEP

    3072:y2ozhL7Gu2efexouvsF3v1U5nNY4FUFm5xlGHj194:yLWu2efexoWsFf18m4FUFDHh9

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.con뫵zibe.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    ro}UWgz#!38E

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5da727c5423f49b759296a41cc055aa3b881fd69f82aeea21fffb07bda3227a3
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections