agenttesla | ik[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ik.exe
Size 381KB
Sample200831-c6pvwsnye2
SHA256 39b1f53d978ec28d01954e7fb10b3350cb4e18e3916296e1e364528c55b0ca7a
MD5 893bc5282d79d9840935fd8f43e5c8bd
SHA1 fdb0fda32666d7203304cb0de9f88624b2948447
SHA512 9f53d944a9da68898ddb6160f6eb8861ee7b2da848b6a0b0b069ce8560f111c2f0a058603dc05a857829348dfb645a410285636e7640a7207542ed8e5ddaab69
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.privateemail.com
Port
587
Username
[email protected]
Password
NeverGiveUp@123

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

ik.exe

.exe 381KB

ik.exe

SHA256 39b1f53d978ec28d01954e7fb10b3350cb4e18e3916296e1e364528c55b0ca7a
MD5 893bc5282d79d9840935fd8f43e5c8bd
SHA1 fdb0fda32666d7203304cb0de9f88624b2948447
SHA512 9f53d944a9da68898ddb6160f6eb8861ee7b2da848b6a0b0b069ce8560f111c2f0a058603dc05a857829348dfb645a410285636e7640a7207542ed8e5ddaab69
MD5 SHA1 SHA512

windows x86

AgentTesla Payload