agenttesla | 973eafd7f0c78c4ba4e0c692881d82feb75679e7704cc4e077c0d48851032c55 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Order.exe
Size 550KB
Sample200707-t8b8mehetx
SHA256 973eafd7f0c78c4ba4e0c692881d82feb75679e7704cc4e077c0d48851032c55
MD5 3badfd574a87a4131b77a702be0dd919
SHA1 48ca2366912f4d461b71228efac1cdf3fae2b8e3
SHA512 397239b5cd59a37cf540feca76c9938068b7e8db85e26ec7626ec53dd4e0901faaecdbe1eb52d33e21ee8514d8e810338aa92f275b16c3e9d29e66114f5050df
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.privateemail.com
Port
587
Username
[email protected]
Password
111aaa

Targets

- Target
  Order.exe
- Size 550KB
- SHA256 973eafd7f0c78c4ba4e0c692881d82feb75679e7704cc4e077c0d48851032c55
- MD5 3badfd574a87a4131b77a702be0dd919
- SHA1 48ca2366912f4d461b71228efac1cdf3fae2b8e3
- SHA512 397239b5cd59a37cf540feca76c9938068b7e8db85e26ec7626ec53dd4e0901faaecdbe1eb52d33e21ee8514d8e810338aa92f275b16c3e9d29e66114f5050df
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan