agenttesla | jiz[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
jiz.exe
Size 279KB
Sample200714-w34488fz72
SHA256 819496d6ef872cf800b5e64428663500ed20c4d2234d501281e50883aa04bd05
MD5 6ee90b652853289fcf4b52b2064c9f4d
SHA1 5806f0b1182dece0695b2f176e1af51d56641966
SHA512 60458772471eb284b7dc5ddfec561f471c3b0417a41a888927fc55d9e83d1baa9e4bf83b40f1636ff18c847eebc5307953bfe399cbb068900d834061f6aa9945
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
terminal6.veeblehosting.com
Port
587
Username
[email protected]
Password
KjmOE%DvpSvC

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

jiz.exe

.exe 279KB

jiz.exe

SHA256 819496d6ef872cf800b5e64428663500ed20c4d2234d501281e50883aa04bd05
MD5 6ee90b652853289fcf4b52b2064c9f4d
SHA1 5806f0b1182dece0695b2f176e1af51d56641966
SHA512 60458772471eb284b7dc5ddfec561f471c3b0417a41a888927fc55d9e83d1baa9e4bf83b40f1636ff18c847eebc5307953bfe399cbb068900d834061f6aa9945
MD5 SHA1 SHA512

windows x86

AgentTesla Payload