agenttesla | a82f6dc96a2aa2ebf5250b6506dc683ee0ecaba7c9c410a2a7c3dfb9c719f6c2 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
requirement for quotation.exe
Size 411KB
Sample200624-mekty42wex
SHA256 a82f6dc96a2aa2ebf5250b6506dc683ee0ecaba7c9c410a2a7c3dfb9c719f6c2
MD5 f8cc4e35a52d9982acd6b301820cefa6
SHA1 aac4afb378e2d0c01ce22b8cb2f566c3a77b4e51
SHA512 1fc14e16804d4469dc460913f606fbfa48a89d6ffbb900377f9d6459a670b2a6348ef08f9936834b43f1ea01f3aa2e12caa0067c1c4c80c98c262d5aaa86f0c2
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.ru
Port
587
Username
[email protected]
Password
solomon12345$$$1

Targets

- Target
  requirement for quotation.exe
- Size 411KB
- SHA256 a82f6dc96a2aa2ebf5250b6506dc683ee0ecaba7c9c410a2a7c3dfb9c719f6c2
- MD5 f8cc4e35a52d9982acd6b301820cefa6
- SHA1 aac4afb378e2d0c01ce22b8cb2f566c3a77b4e51
- SHA512 1fc14e16804d4469dc460913f606fbfa48a89d6ffbb900377f9d6459a670b2a6348ef08f9936834b43f1ea01f3aa2e12caa0067c1c4c80c98c262d5aaa86f0c2
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2