agenttesla | RFQ-284683839[.]001[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
RFQ-284683839.001.exe
Size 216KB
Sample210514-ntv86ds95a
SHA256 caaf972ff74329282c2466ded6539eedc5d5db9817ebb53d3e7deab201195ca2
MD5 e63c392f3746eb1f742bb6782c9d6b8e
SHA1 412ae93e7aa630c201bf0c131d6d8bd8591d7f6f
SHA512 b57c3134ac47d69a1133f816c60912bd70a5d97432f026a46198887a4d6a57930e6b0b98abbf277171b89423a4367f167278a3139f0045decdc07d4c3fa23aac
MD5 SHA1 SHA512

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.tccinfaes.com
Port
587
Username
[email protected]
Password
transportes

Signatures

AgentTesla Payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

File Explorer

RFQ-284683839.001.exe

.exe 216KB

RFQ-284683839.001.exe

SHA256 caaf972ff74329282c2466ded6539eedc5d5db9817ebb53d3e7deab201195ca2
MD5 e63c392f3746eb1f742bb6782c9d6b8e
SHA1 412ae93e7aa630c201bf0c131d6d8bd8591d7f6f
SHA512 b57c3134ac47d69a1133f816c60912bd70a5d97432f026a46198887a4d6a57930e6b0b98abbf277171b89423a4367f167278a3139f0045decdc07d4c3fa23aac
MD5 SHA1 SHA512

windows x86

AgentTesla Payload