agenttesla | 3601f2af3e32cbff553e77449eebe655a972a796e5eec824ca3d333b50da1aac | Triage

Sharing

General

Target

3601f2af3e32cbff553e77449eebe655a972a796e5eec824ca3d333b50da1aac
Size

264KB
MD5

d888376a23f2af5f6dda24e95fc5b0a0
SHA1

691c5532c9a9bd2c61e9d763c2cd07a4568a4f20
SHA256

3601f2af3e32cbff553e77449eebe655a972a796e5eec824ca3d333b50da1aac
SHA512

01d4e46325df32666fa22e6d786cd0d1a95b7968a7d5606ba4e305baf4430c6903035b66fb4df5bf53df426c9e5d4a3cfaf8a11a50cd884be5f41bd551bcd64e
SSDEEP

3072:6klDYDrrTD8GenSH63SatZTCafBMK4rxHUQ58KpVfW:6k+DrrTD8GenC63lbjaKuNUWpB

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.yandex.ru
Port:
587
Username:
[email protected]
Password:
graceofgod@amen
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3601f2af3e32cbff553e77449eebe655a972a796e5eec824ca3d333b50da1aac

Files

3601f2af3e32cbff553e77449eebe655a972a796e5eec824ca3d333b50da1aac
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ