agenttesla | 4nBui305kQk0uesSIlqp[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
4nBui305kQk0uesSIlqp.exe
Size 216KB
Sample210505-5e7nv2psqj
SHA256 84ad4c1a9b574e453479adc8a6aed2bcad3058cbb00038fc67c072e0ccc54b2f
MD5 3d2a98abe20a6cfeeefe4e752715ca8b
SHA1 690559b4677eec73f907eeb6c89032690d94e346
SHA512 42b5e8efb39591ca93c207bd88d1eff43c0bfa94c27958a761f631ebd08bb1a00c7baff6a557c649610d9c0cf098a99015b238d3b12e674a87573eeb7972f325
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.privateemail.com
Port
587
Username
[email protected]
Password
TryAgain@1234

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

4nBui305kQk0uesSIlqp.exe

.exe 216KB

4nBui305kQk0uesSIlqp.exe

SHA256 84ad4c1a9b574e453479adc8a6aed2bcad3058cbb00038fc67c072e0ccc54b2f
MD5 3d2a98abe20a6cfeeefe4e752715ca8b
SHA1 690559b4677eec73f907eeb6c89032690d94e346
SHA512 42b5e8efb39591ca93c207bd88d1eff43c0bfa94c27958a761f631ebd08bb1a00c7baff6a557c649610d9c0cf098a99015b238d3b12e674a87573eeb7972f325
MD5 SHA1 SHA512

windows x86

AgentTesla Payload