General

  • Target

    JaffaCakes118_12c88b22c80eb72af2065c62fcaba2a68bf5da17e50a777bd7aeaff69be3b883

  • Size

    232KB

  • MD5

    a1c1520fea7414a883ea8c42cc89d4e0

  • SHA1

    ab2376de9d0e83346a7adb3b9784107416d7a476

  • SHA256

    12c88b22c80eb72af2065c62fcaba2a68bf5da17e50a777bd7aeaff69be3b883

  • SHA512

    76565855c2df6506823599c175d9477dedb4beca17fcee2fa4519b0471afaa905d6d08e7517459e9fa3d9b04ffbfbdb44624c117905609a1900087b2d62fa642

  • SSDEEP

    6144:KSagYHn4yUNQkgh2hMMqdp5oMpmZrbuQQ:KSagon4XkboMpmZfI

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    us2.smtp.mailhostbox.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    xvdUCau3

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_12c88b22c80eb72af2065c62fcaba2a68bf5da17e50a777bd7aeaff69be3b883
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections