agenttesla | obi[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
obi.exe
Size 216KB
Sample200928-ld85dw4nbx
SHA256 7b5cd0182b1122c0231fb30af6252fe4b0b9a9dd0962d14264ff1f09ced46943
MD5 1033751639d7dc4f2309794806f6b4ce
SHA1 211c432c36f98d24e319381f23c22ce97eefcba0
SHA512 25a2378d66748510a9d0520465ef5009eb26689939cc6bdea2cd9e37a97fb088ca784d5677ff280dc9fbacaeeae0e46bd7a9605b1b9453a193711a4806f7fc6b
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
terminal6.veeblehosting.com
Port
587
Username
[email protected]
Password
xbNoSad?0Xlc

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

obi.exe

.exe 216KB

obi.exe

SHA256 7b5cd0182b1122c0231fb30af6252fe4b0b9a9dd0962d14264ff1f09ced46943
MD5 1033751639d7dc4f2309794806f6b4ce
SHA1 211c432c36f98d24e319381f23c22ce97eefcba0
SHA512 25a2378d66748510a9d0520465ef5009eb26689939cc6bdea2cd9e37a97fb088ca784d5677ff280dc9fbacaeeae0e46bd7a9605b1b9453a193711a4806f7fc6b
MD5 SHA1 SHA512

windows x86

AgentTesla Payload