agenttesla | 016e3777c66eb1d3ebc04c573a0b9f9dca639d32312b87e68d84934b13e02a9c | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PO_03422020_11.exe
Size 469KB
Sample200716-etnh2wan32
SHA256 016e3777c66eb1d3ebc04c573a0b9f9dca639d32312b87e68d84934b13e02a9c
MD5 a128f9fcd3dd95132460741e5c5ade03
SHA1 99a3d5233d4a715265107248b9f05357dafdc3b1
SHA512 96a80d30f210bb41fad2425f8ecd45d7e4b138a99741f4cf72a9d85579d490547b9b90332586feca0bb3e35c5d74f42bd9a0b54d003c75ded31ac200e843a6ee
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.privateemail.com
Port
587
Username
[email protected]
Password
111aaa

Targets

- Target
  PO_03422020_11.exe
- Size 469KB
- SHA256 016e3777c66eb1d3ebc04c573a0b9f9dca639d32312b87e68d84934b13e02a9c
- MD5 a128f9fcd3dd95132460741e5c5ade03
- SHA1 99a3d5233d4a715265107248b9f05357dafdc3b1
- SHA512 96a80d30f210bb41fad2425f8ecd45d7e4b138a99741f4cf72a9d85579d490547b9b90332586feca0bb3e35c5d74f42bd9a0b54d003c75ded31ac200e843a6ee
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2