Overview

overview

10

Static

static

10

6157fd0edb...18.exe

windows7-x64

3

6157fd0edb...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6157fd0edbe2a297f6ec64c24256c7e7c95e93a57eb48b755bf32a2046c28518

  • Size

    301KB

  • MD5

    f65ef3cfbdc9f4c52a78b445062032c3

  • SHA1

    45b8829c3102611e8886366681781aafa70c511c

  • SHA256

    6157fd0edbe2a297f6ec64c24256c7e7c95e93a57eb48b755bf32a2046c28518

  • SHA512

    7ab5a1ab35e79d0f2b15bb9bd82e22014a5fd601dc1f6ac3ff27b9bacf209819faed2e37bedd9e60798515883354f14099e4e192569a7709151e4118f315508f

  • SSDEEP

    6144:kBlSyEoYxHMhopt4Tgb1JTofxMLb+Nc2Lneas3r7w1izb:olSyEouHl1JTl72bs3r

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    server257.web-hosting.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    QFLj2#~CYpH8

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6157fd0edbe2a297f6ec64c24256c7e7c95e93a57eb48b755bf32a2046c28518
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections