AgentTesla_Keylogger_04-07-2019

#AgentTesla #Stealer #Keylogger
--------------------------------------
04-07-2019
--------------------------------------
Main object- "e5b952b64d88760fae2694028340b37318e5c86ce42b7c4b9180082d2dac4a55.bin.gz"
	sha256	505bee6fd85ad3bdd0a6a265dc48fdca578c34e90b741bdb85cf5d5f86b1c60b
	sha1	0202c9d733eb910259912c05aab4965915c2203a
	md5	5bfe938f2fd5ec13528418189df5b31c
	ssdeep_parts	[object Object]
Dropped executable file
	sha256	C:\Users\admin\Desktop\e5b952b64d88760fae2694028340b37318e5c86ce42b7c4b9180082d2dac4a55.bin.gz	e5b952b64d88760fae2694028340b37318e5c86ce42b7c4b9180082d2dac4a55
DNS requests
	domain	checkip.amazonaws.com
	domain	mail.privateemail.com
Connections
	ip	198.54.122.60
	ip	34.233.102.38
HTTP/HTTPS requests
	url	http://checkip.amazonaws.com/