agenttesla | greattastesmb[.]ca_wp_content_plugins_duplicator_files_ez[.]exe[.]malw | Triage

Sharing

General

Target

greattastesmb.ca_wp_content_plugins_duplicator_files_ez.exe.malw
Size

278KB
MD5

c1972a9357d0972df42366128e0c72f9
SHA1

506d519225dddc42fe23e785d0fd1612baf43edf
SHA256

5875ea08a37ec09e14190fe847a6802ec7a63ae328d81e7ce8fb0ef5da9497bd
SHA512

db9aada5e4003f39064aecad7c74e02bffec669f45884b2ccf2d72f3085be62e463101a4764259158ffc267df506686489b47f91af25b45ee92106e6b26cc867

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
terminal6.veeblehosting.com
Port:
587
Username:
[email protected]
Password:
bimlJSYO(K=N

Signatures

AgentTesla Payload 1 IoCs

Processes:

resource yara_rule

sample family_agenttesla
Agenttesla family
agenttesla

Files

greattastesmb.ca_wp_content_plugins_duplicator_files_ez.exe.malw
.exe windows x86