agenttesla | 43cb63bccbbefa61f33b34f36dfcb93d24dde7f2287d629cc0ba768deedcd81e | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PI201008163.exe
Size 531KB
Sample200703-1enm4ecphn
SHA256 43cb63bccbbefa61f33b34f36dfcb93d24dde7f2287d629cc0ba768deedcd81e
MD5 5e6e00f0765c6264d809dd972576bed1
SHA1 25d0c64aa3130728b475249b59b98e180e485204
SHA512 fe41d3de0fe966645176748652e80a35583383a0652e659d780166ad19f250f31e0e8fe2bee6da64e62def6e2697f4aa2e3e95ec4e6070d3058980895704199e
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.privateemail.com
Port
587
Username
[email protected]
Password
success21

Targets

- Target
  PI201008163.exe
- Size 531KB
- SHA256 43cb63bccbbefa61f33b34f36dfcb93d24dde7f2287d629cc0ba768deedcd81e
- MD5 5e6e00f0765c6264d809dd972576bed1
- SHA1 25d0c64aa3130728b475249b59b98e180e485204
- SHA512 fe41d3de0fe966645176748652e80a35583383a0652e659d780166ad19f250f31e0e8fe2bee6da64e62def6e2697f4aa2e3e95ec4e6070d3058980895704199e
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan