General

  • Target

    greattastesmb.ca_wp_content_plugins_duplicator_files_ez.exe.malw

  • Size

    278KB

  • MD5

    c1972a9357d0972df42366128e0c72f9

  • SHA1

    506d519225dddc42fe23e785d0fd1612baf43edf

  • SHA256

    5875ea08a37ec09e14190fe847a6802ec7a63ae328d81e7ce8fb0ef5da9497bd

  • SHA512

    db9aada5e4003f39064aecad7c74e02bffec669f45884b2ccf2d72f3085be62e463101a4764259158ffc267df506686489b47f91af25b45ee92106e6b26cc867

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    terminal6.veeblehosting.com
  • Port:
    587
  • Username:
    eze@a-t-mould.com
  • Password:
    bimlJSYO(K=N

Signatures

  • AgentTesla Payload 1 IoCs
  • Agenttesla family

Files

  • greattastesmb.ca_wp_content_plugins_duplicator_files_ez.exe.malw
    .exe windows x86