agenttesla | 0b905272fa9975536188ab11ef27dca1658a41ac3076aa07213ff20695cc3b68 | Triage

Sharing

General

Target

0b905272fa9975536188ab11ef27dca1658a41ac3076aa07213ff20695cc3b68
Size

164KB
MD5

4cc9eff269022ab111e740000f022f2a
SHA1

9c0ebfffb6632c7c4b55b9dd4157f825d406413c
SHA256

0b905272fa9975536188ab11ef27dca1658a41ac3076aa07213ff20695cc3b68
SHA512

ea43813a14628a2c6deee220db3e7c7faed4d03c750c850ca95fe6c02a206c5ee7e5981fa2b691003fb95e5c2b988a80844a9fbd8e166b43a77b1251714a5486
SSDEEP

3072:1J9K8XOiZoFs+wGQtN4gG1C8wMP/DlviRx4YkIxhFQ:1DXOBFs+wG2N4ZCEz1iRxPx

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
server1.sqsendy.shop
Port:
587
Username:
[email protected]
Password:
^Qt*UoquP.CM
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b905272fa9975536188ab11ef27dca1658a41ac3076aa07213ff20695cc3b68

Files

0b905272fa9975536188ab11ef27dca1658a41ac3076aa07213ff20695cc3b68
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ