AgentTesla_Keylogger_15-07-2019

#AgentTesla #Stealer #Trojan
-------------------------------
15-07-2019
-------------------------------
Main object- "fe54b95261403ca2a0b6c462e4d6bfeef3c83d8287d1be290ea32a67240007d7.bin.gz"
	sha256	58261131d170afaed5be5d751a9b88036bb3836f43357ebf01ad714f0bd93f85
	sha1	d62a95e41a66ea4fce6859324c22f7074975056a
	md5	d48e1ce64f6d1649699f364b71480e1b
Dropped executable file
	sha256	C:\Users\admin\Desktop\fe54b95261403ca2a0b6c462e4d6bfeef3c83d8287d1be290ea32a67240007d7.bin.gz	fe54b95261403ca2a0b6c462e4d6bfeef3c83d8287d1be290ea32a67240007d7
DNS requests
	domain	smtp.bestlogs77.com
	domain	checkip.amazonaws.com
Connections
	ip	208.91.199.225
	ip	34.197.157.64
HTTP/HTTPS requests
	url	http://checkip.amazonaws.com/