Static task
static1
Behavioral task
behavioral1
Sample
greattastesmb.ca_wp_content_plugins_duplicator_files_def.exe.malw.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
greattastesmb.ca_wp_content_plugins_duplicator_files_def.exe.malw.exe
Resource
win10
0 signatures
0 seconds
General
-
Target
greattastesmb.ca_wp_content_plugins_duplicator_files_def.exe.malw
-
Size
277KB
-
MD5
04916d4dcdab6c259c5f231fb682179e
-
SHA1
f7870a3b03e347ea63541d0f008d3a3cbb16f9dc
-
SHA256
b65f47fea864680cbed7c0c090dd80c3b665eb6d93a607f91e3da522a9505658
-
SHA512
4fc84b108efb3fa0f13c0cfa0aa4704e91f6aff764a2ed6e577474f319f973bf9c10aaae44cb5ed139e491040106acaf2e047f310849814b36e1458fe7163552
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.markhamautoglass.ca - Port:
587 - Username:
[email protected] - Password:
]~,rfrP+?)+k
Signatures
-
AgentTesla Payload 1 IoCs
resource yara_rule sample family_agenttesla -
Agenttesla family
Files
-
greattastesmb.ca_wp_content_plugins_duplicator_files_def.exe.malw.exe windows x86