agenttesla | Payment slip PO#FL17474-7403810[.]rar[.]exe | Triage

Sharing

General

Target

Payment slip PO#FL17474-7403810.rar.exe
Size

217KB
MD5

f1ada0fe08ef44b8f589e974f619d87d
SHA1

bf4c5534825090df14f285624f9b4ea699f63bb0
SHA256

8d612b2743dcec9641417c32c472aca58eb0161e8609754fcf728c7ee57ee5ca
SHA512

2a329b5df90e7e28253dbf647ec8971905d24e7de91cff60a8d4d9e44ecd829154ec9f611cf1807453ba9d678cf6fbbe1f817caf220e0125638e93b76a0d42bc

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.flagmonkey.com.au
Port:
587
Username:
[email protected]
Password:
Enter@222J

Signatures

AgentTesla Payload 1 IoCs

Processes:

resource yara_rule

sample family_agenttesla
Agenttesla family
agenttesla

Files

Payment slip PO#FL17474-7403810.rar.exe
.exe windows x86