agenttesla | greattastesmb[.]ca_wp_content_plugins_duplicator_files_ez[.]exe[.]malw | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
greattastesmb.ca_wp_content_plugins_duplicator_files_ez.exe.malw
Size 278KB
Sample200708-9xx9x8787s
SHA256 5875ea08a37ec09e14190fe847a6802ec7a63ae328d81e7ce8fb0ef5da9497bd
MD5 c1972a9357d0972df42366128e0c72f9
SHA1 506d519225dddc42fe23e785d0fd1612baf43edf
SHA512 db9aada5e4003f39064aecad7c74e02bffec669f45884b2ccf2d72f3085be62e463101a4764259158ffc267df506686489b47f91af25b45ee92106e6b26cc867
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
terminal6.veeblehosting.com
Port
587
Username
[email protected]
Password
bimlJSYO(K=N

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

greattastesmb.ca_wp_content_plugins_duplicator_files_ez.exe.malw

.exe 278KB

greattastesmb.ca_wp_content_plugins_duplicator_files_ez.exe.malw

SHA256 5875ea08a37ec09e14190fe847a6802ec7a63ae328d81e7ce8fb0ef5da9497bd
MD5 c1972a9357d0972df42366128e0c72f9
SHA1 506d519225dddc42fe23e785d0fd1612baf43edf
SHA512 db9aada5e4003f39064aecad7c74e02bffec669f45884b2ccf2d72f3085be62e463101a4764259158ffc267df506686489b47f91af25b45ee92106e6b26cc867
MD5 SHA1 SHA512

windows x86

AgentTesla Payload