agenttesla | lav[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
lav.exe
Size 278KB
Sample200714-1al7mcsfys
SHA256 2259e5a115cf67489d19d8a0076f1a86c2e9066483ad36a5036ca5d2e5b1f715
MD5 3733b384bb81dce1bc7758cc1ac74f22
SHA1 ae925d7653d0a9726c11eef634d5fcf46ac7c90d
SHA512 1f552dc6c4ccd94fb3dacf54e7c1ab406dab2ba139b378e17f090dfea5796f0c37dc02b0ec0f7c4b26a560cde665d2d1802e779c970a00a81ead89a994d834af
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
terminal6.veeblehosting.com
Port
587
Username
[email protected]
Password
dsJ]+eyPd=G7

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

lav.exe

.exe 278KB

lav.exe

SHA256 2259e5a115cf67489d19d8a0076f1a86c2e9066483ad36a5036ca5d2e5b1f715
MD5 3733b384bb81dce1bc7758cc1ac74f22
SHA1 ae925d7653d0a9726c11eef634d5fcf46ac7c90d
SHA512 1f552dc6c4ccd94fb3dacf54e7c1ab406dab2ba139b378e17f090dfea5796f0c37dc02b0ec0f7c4b26a560cde665d2d1802e779c970a00a81ead89a994d834af
MD5 SHA1 SHA512

windows x86

AgentTesla Payload