AgentTesla_RAT_IOCs_24-04-2019

#AgentTesla #Keylogger #RAT #Trojan
----------------------------------------
24-04-2019				IOC's
----------------------------------------
Main object- "7635c77abb79760f5102af1a637d2109fa5c6e769ed237b225ca9d74e55a5baf_qnlgPjzm2k.bin.gz"
	sha256	e5209dd845213d7447548049bda1961fddeb0e7ca570e877fc79f365662d1141
	sha1	6da8a19e3a000e4e42c4a40357a35dec98b0857d
	md5	aff0b4c18046b23a0a9f76a3dbc5448f
Dropped executable file
	sha256	C:\Users\admin\Desktop\7635c77abb79760f5102af1a637d2109fa5c6e769ed237b225ca9d74e55a5baf_qnlgPjzm2k.bin.gz	7635c77abb79760f5102af1a637d2109fa5c6e769ed237b225ca9d74e55a5baf
DNS requests
	domain	checkip.amazonaws.com
	domain	mail.jyotistrips.com
Connections
	ip	192.185.189.106
	ip	52.200.125.74
HTTP/HTTPS requests
	url	http://checkip.amazonaws.com/