agenttesla | NBUSpRGwKqFfAcoxptdwkgXyGpxRqE[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
NBUSpRGwKqFfAcoxptdwkgXyGpxRqE.exe
Size 216KB
Sample201009-p671ec9ccn
SHA256 e86a4c2aa642b659488c7b5dc3b241d17b9e43cd678d7856e69e14e92bce2836
MD5 2a001b048153a1e600faf211720fa84b
SHA1 02c2b850ebb9a8416ad7d36771e571b99761c4ce
SHA512 4aa02989be01c3e379bd534dea2dec317a07c1a2900df2c58a2aeb74721e49ada52314428322bcdae582c5ecc6e8ecb92c12549672fa517c1e0a7f89c46fd7a3
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.privateemail.com
Port
587
Username
[email protected]
Password
Protected@123

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

NBUSpRGwKqFfAcoxptdwkgXyGpxRqE.exe

.exe 216KB

NBUSpRGwKqFfAcoxptdwkgXyGpxRqE.exe

SHA256 e86a4c2aa642b659488c7b5dc3b241d17b9e43cd678d7856e69e14e92bce2836
MD5 2a001b048153a1e600faf211720fa84b
SHA1 02c2b850ebb9a8416ad7d36771e571b99761c4ce
SHA512 4aa02989be01c3e379bd534dea2dec317a07c1a2900df2c58a2aeb74721e49ada52314428322bcdae582c5ecc6e8ecb92c12549672fa517c1e0a7f89c46fd7a3
MD5 SHA1 SHA512

windows x86

AgentTesla Payload