agenttesla | 1f6648f6fd581ed57b9566f4eb942687aaa6401baba93ed7c287933c7d3d6ab1 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
b9ad9d623e05bfa11124ab8b54c74fbd.exe
Size 324KB
Sample200713-d7bwssj1ta
SHA256 1f6648f6fd581ed57b9566f4eb942687aaa6401baba93ed7c287933c7d3d6ab1
MD5 b9ad9d623e05bfa11124ab8b54c74fbd
SHA1 ed51c11b5170b1860f8935d6af82dde8b4a38f85
SHA512 bb82af31337a939d1af30668876095e205341180ef0bf800fd5d8789a2fe1663f38ffa00be76d017029b6c54c7b1364bf60f58ba8373fc88e001697a3e99bfd0
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.bapipl.com
Port
587
Username
[email protected]
Password
Bharat123

Targets

- Target
  b9ad9d623e05bfa11124ab8b54c74fbd.exe
- Size 324KB
- SHA256 1f6648f6fd581ed57b9566f4eb942687aaa6401baba93ed7c287933c7d3d6ab1
- MD5 b9ad9d623e05bfa11124ab8b54c74fbd
- SHA1 ed51c11b5170b1860f8935d6af82dde8b4a38f85
- SHA512 bb82af31337a939d1af30668876095e205341180ef0bf800fd5d8789a2fe1663f38ffa00be76d017029b6c54c7b1364bf60f58ba8373fc88e001697a3e99bfd0
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2