agenttesla | men[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
men.exe
Size 278KB
Sample200714-v75yp4dzpa
SHA256 0f21c59eb1064b940f4018e76533dd4067c1a88de96581d254e81df1ec8cefee
MD5 47c995d8b0d32fbe26d7ac1fba5ba303
SHA1 99fb9efa837238227e71d0102f585fe068a63bcb
SHA512 57c0159e7a71cc326e444541836e614990db641307ce7c48e537477fbb49cd4c70e83504dcd5d7acf3026c3bf5109f6ede2cbf5474de33a13757770cbaf2a436
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
terminal6.veeblehosting.com
Port
587
Username
[email protected]
Password
b#&fPTB~hQvW

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

men.exe

.exe 278KB

men.exe

SHA256 0f21c59eb1064b940f4018e76533dd4067c1a88de96581d254e81df1ec8cefee
MD5 47c995d8b0d32fbe26d7ac1fba5ba303
SHA1 99fb9efa837238227e71d0102f585fe068a63bcb
SHA512 57c0159e7a71cc326e444541836e614990db641307ce7c48e537477fbb49cd4c70e83504dcd5d7acf3026c3bf5109f6ede2cbf5474de33a13757770cbaf2a436
MD5 SHA1 SHA512

windows x86

AgentTesla Payload