agenttesla | PHYNO[.]txt[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PHYNO.txt.exe
Size 381KB
Sample200828-76hptxcsbx
SHA256 7a93cc0c53a02b539c07c06f9fc2d0e9b3794e6c33165e4e7cbe34c569e31278
MD5 38f3fd4d82f366b1b5198afbcfb10838
SHA1 974319d74ccf873b7c3070b042b4b2823ddfce40
SHA512 7987954b8cd3b4d810e6e42e8cb7e6beead3f7b14ded7cf77bf47e493b3f29e01b6d0090f9d5e7ba3aaf5e933b09deabd4a2d27202a2ace3132d6ce6dd8ee7c9
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.privateemail.com
Port
587
Username
[email protected]
Password
Blessings@12345

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

PHYNO.txt.exe

.exe 381KB

PHYNO.txt.exe

SHA256 7a93cc0c53a02b539c07c06f9fc2d0e9b3794e6c33165e4e7cbe34c569e31278
MD5 38f3fd4d82f366b1b5198afbcfb10838
SHA1 974319d74ccf873b7c3070b042b4b2823ddfce40
SHA512 7987954b8cd3b4d810e6e42e8cb7e6beead3f7b14ded7cf77bf47e493b3f29e01b6d0090f9d5e7ba3aaf5e933b09deabd4a2d27202a2ace3132d6ce6dd8ee7c9
MD5 SHA1 SHA512

windows x86

AgentTesla Payload