General

  • Target

    greattastesmb.ca_wp_content_plugins_duplicator_files_def.exe.malw

  • Size

    277KB

  • MD5

    04916d4dcdab6c259c5f231fb682179e

  • SHA1

    f7870a3b03e347ea63541d0f008d3a3cbb16f9dc

  • SHA256

    b65f47fea864680cbed7c0c090dd80c3b665eb6d93a607f91e3da522a9505658

  • SHA512

    4fc84b108efb3fa0f13c0cfa0aa4704e91f6aff764a2ed6e577474f319f973bf9c10aaae44cb5ed139e491040106acaf2e047f310849814b36e1458fe7163552

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    mail.markhamautoglass.ca
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    ]~,rfrP+?)+k

Signatures

  • AgentTesla Payload 1 IoCs
  • Agenttesla family

Files

  • greattastesmb.ca_wp_content_plugins_duplicator_files_def.exe.malw
    .exe windows x86