Win32[.]AgentTesla[.]exe

Resubmissions

23/07/2026, 10:49

260723-mw4r8swdkd

23/07/2026, 10:47

260723-mvxmjabh927

Sharing

Copy URL Twitter E-mail

General

Target
Win32.AgentTesla.exe
Size 450KB
Sample260723-mw4r8swdkd
SHA256 699ec052ecc898bdbdafea0027c4ab44c3d01ae011c17745dd2b7fbddaa077f3
MD5 2b294b3499d1cce794badffc959b7618
SHA1 9aa826795798948e8058e3ff1342d81d5d8ee4fa
SHA512 8b9d64b54323282f2e961f016e8e39d461f15fa9e11af0255c2376efdc7b48d77168f063a3a5be5f76af63355d847969e046823e0a875da596876890153bbea2
SSDEEP 12288:5qIrEFD09leQEA49darfr3/2AbitnVYE96ltR:5AFD1A498H2D
TLSH
T106A4063C2DEA602BF2B2EF718BD47597E9DAB6733635585A1482030AC513983EEC153D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Win32.AgentTesla.exe

File Explorer

Win32.AgentTesla.exe

.exe 450KB

Win32.AgentTesla.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 699ec052ecc898bdbdafea0027c4ab44c3d01ae011c17745dd2b7fbddaa077f3
MD5 2b294b3499d1cce794badffc959b7618
SHA1 9aa826795798948e8058e3ff1342d81d5d8ee4fa
SHA512 8b9d64b54323282f2e961f016e8e39d461f15fa9e11af0255c2376efdc7b48d77168f063a3a5be5f76af63355d847969e046823e0a875da596876890153bbea2
SSDEEP 12288:5qIrEFD09leQEA49darfr3/2AbitnVYE96ltR:5AFD1A498H2D
TLSH
T106A4063C2DEA602BF2B2EF718BD47597E9DAB6733635585A1482030AC513983EEC153D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

443086

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Win32.AgentTesla.exe

mscoree

dotnet