agenttesla | ob[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ob.exe
Size 216KB
Sample200930-ly2r98ghbs
SHA256 3e4483bff852f83c8c2e8fcf81f20c6473a296b7f9d3fbca391cff4303bb94d3
MD5 4c627bc8a6bac5edce13474299b83e7f
SHA1 6d59ae944d20e4a824f4343e37447534643b7be5
SHA512 c70292559d8e9aa74a085136e29825e664eeeebf543969b973dfdcd6f06c4c7e3fcd8e14143e2b04d1962853b4844c8a4f40fb7a4624c59f75fbc00e2639713b
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
terminal6.veeblehosting.com
Port
587
Username
[email protected]
Password
xbNoSad?0Xlc

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

ob.exe

.exe 216KB

ob.exe

SHA256 3e4483bff852f83c8c2e8fcf81f20c6473a296b7f9d3fbca391cff4303bb94d3
MD5 4c627bc8a6bac5edce13474299b83e7f
SHA1 6d59ae944d20e4a824f4343e37447534643b7be5
SHA512 c70292559d8e9aa74a085136e29825e664eeeebf543969b973dfdcd6f06c4c7e3fcd8e14143e2b04d1962853b4844c8a4f40fb7a4624c59f75fbc00e2639713b
MD5 SHA1 SHA512

windows x86

AgentTesla Payload