agenttesla | bc3ad77264762f9b266ab641f391bbb456ef4bc5c27f64b884506eeaa84dfe58 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
RF_DHL KULI500796821_PO200000035_SCAN DOCS.exe
Size 450KB
Sample200710-e5d86662n6
SHA256 bc3ad77264762f9b266ab641f391bbb456ef4bc5c27f64b884506eeaa84dfe58
MD5 8f178a002181e9b40cd09e244b61d1c9
SHA1 ea47dfa2d70ee217a9a5c4cf19c66c8a65108fc4
SHA512 fa15075384a95e57c2077127fbccfc4eeed67d81cf140685c416858a7ca9bc5d310149d0952bf6fbdcfc0db65f7a53d1508edfadd490e69e1333137b5a327d15
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
faith12AB

Targets

- Target
  RF_DHL KULI500796821_PO200000035_SCAN DOCS.exe
- Size 450KB
- SHA256 bc3ad77264762f9b266ab641f391bbb456ef4bc5c27f64b884506eeaa84dfe58
- MD5 8f178a002181e9b40cd09e244b61d1c9
- SHA1 ea47dfa2d70ee217a9a5c4cf19c66c8a65108fc4
- SHA512 fa15075384a95e57c2077127fbccfc4eeed67d81cf140685c416858a7ca9bc5d310149d0952bf6fbdcfc0db65f7a53d1508edfadd490e69e1333137b5a327d15
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2