agenttesla | 6fac6128af0c87fc3022f05b3ba5e1734ca7f256281e077817ddbac2720841bb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
URGENT REQUEST FOR QUOTATION.2020_GOLDEN MICRON (M) SDN BHD.exe
Size 345KB
Sample200713-jfk85pmlpj
SHA256 6fac6128af0c87fc3022f05b3ba5e1734ca7f256281e077817ddbac2720841bb
MD5 320e54009666cd9a6fb1089a937bd54c
SHA1 7bf2e34a296851e31e90339a2d24954bf57a6106
SHA512 3b48ce3a3f117ce69e0e26b03569a8d63586684baa781e330e865abaf81ea1ed65ec93320bd8056c4e1511992b3743347820b47670eb651617e22594ef5a6a73
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
smart123456smart

Targets

- Target
  URGENT REQUEST FOR QUOTATION.2020_GOLDEN MICRON (M) SDN BHD.exe
- Size 345KB
- SHA256 6fac6128af0c87fc3022f05b3ba5e1734ca7f256281e077817ddbac2720841bb
- MD5 320e54009666cd9a6fb1089a937bd54c
- SHA1 7bf2e34a296851e31e90339a2d24954bf57a6106
- SHA512 3b48ce3a3f117ce69e0e26b03569a8d63586684baa781e330e865abaf81ea1ed65ec93320bd8056c4e1511992b3743347820b47670eb651617e22594ef5a6a73
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2