agenttesla | greattastesmb[.]ca_wp_content_plugins_duplicator_files_def[.]exe[.]malw | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
greattastesmb.ca_wp_content_plugins_duplicator_files_def.exe.malw
Size 277KB
Sample200708-rgglylawmj
SHA256 b65f47fea864680cbed7c0c090dd80c3b665eb6d93a607f91e3da522a9505658
MD5 04916d4dcdab6c259c5f231fb682179e
SHA1 f7870a3b03e347ea63541d0f008d3a3cbb16f9dc
SHA512 4fc84b108efb3fa0f13c0cfa0aa4704e91f6aff764a2ed6e577474f319f973bf9c10aaae44cb5ed139e491040106acaf2e047f310849814b36e1458fe7163552
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.markhamautoglass.ca
Port
587
Username
[email protected]
Password
]~,rfrP+?)+k

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

greattastesmb.ca_wp_content_plugins_duplicator_files_def.exe.malw

.exe 277KB

greattastesmb.ca_wp_content_plugins_duplicator_files_def.exe.malw

SHA256 b65f47fea864680cbed7c0c090dd80c3b665eb6d93a607f91e3da522a9505658
MD5 04916d4dcdab6c259c5f231fb682179e
SHA1 f7870a3b03e347ea63541d0f008d3a3cbb16f9dc
SHA512 4fc84b108efb3fa0f13c0cfa0aa4704e91f6aff764a2ed6e577474f319f973bf9c10aaae44cb5ed139e491040106acaf2e047f310849814b36e1458fe7163552
MD5 SHA1 SHA512

windows x86

AgentTesla Payload