agenttesla | c2322dac60ced59ddd3494c85a239e82[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
c2322dac60ced59ddd3494c85a239e82.exe
Size 279KB
Sample200626-zgrb2rtmt6
SHA256 bd98b10ad2db043f17d4250c9c2fea7134a893fd666ba67649a024b067e8cdc8
MD5 c2322dac60ced59ddd3494c85a239e82
SHA1 26a61ed69694b2680fd7141dbde916db071e31bc
SHA512 fe0ed9f294a2d01dfd7757925b587a5c58e4838e611198324a8b4965d8286900d6ed6bd83955060f35b5b5237372ca8efb9dc72695c2af7e6b59b7e05f25529d
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.markhamautoglass.ca
Port
587
Username
[email protected]
Password
]~,rfrP+?)+k

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

c2322dac60ced59ddd3494c85a239e82.exe

.exe 279KB

c2322dac60ced59ddd3494c85a239e82.exe

SHA256 bd98b10ad2db043f17d4250c9c2fea7134a893fd666ba67649a024b067e8cdc8
MD5 c2322dac60ced59ddd3494c85a239e82
SHA1 26a61ed69694b2680fd7141dbde916db071e31bc
SHA512 fe0ed9f294a2d01dfd7757925b587a5c58e4838e611198324a8b4965d8286900d6ed6bd83955060f35b5b5237372ca8efb9dc72695c2af7e6b59b7e05f25529d
MD5 SHA1 SHA512

windows x86

AgentTesla Payload