agenttesla | d18bcd6d166abe550a2633e07b2225dfaa97a7428eb1d3449b3d6b6db74e348a | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
2020 Repeat Order.PDF File.exe
Size 479KB
Sample200624-9s2bsxkhte
SHA256 d18bcd6d166abe550a2633e07b2225dfaa97a7428eb1d3449b3d6b6db74e348a
MD5 70a7859e9318d54b838234c0b213144c
SHA1 901e543592fa35d6f779976f4560564e4fbbda61
SHA512 74613b2c2acc307c16df80a5d7c790a51a96963e33f112e77183e60999b21daf56f680781958ef737099873a2c04bacb254545275224e33b466ab54e723c49dc
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
ekeneobi12345

Targets

- Target
  2020 Repeat Order.PDF File.exe
- Size 479KB
- SHA256 d18bcd6d166abe550a2633e07b2225dfaa97a7428eb1d3449b3d6b6db74e348a
- MD5 70a7859e9318d54b838234c0b213144c
- SHA1 901e543592fa35d6f779976f4560564e4fbbda61
- SHA512 74613b2c2acc307c16df80a5d7c790a51a96963e33f112e77183e60999b21daf56f680781958ef737099873a2c04bacb254545275224e33b466ab54e723c49dc
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan