agenttesla | 551d7e7353f2a10adb0e057e0fda9bf048ca9e9aa2e7498566e0b9b58879c2f8 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PO-2.exe
Size 863KB
Sample200717-8ftemefnl2
SHA256 551d7e7353f2a10adb0e057e0fda9bf048ca9e9aa2e7498566e0b9b58879c2f8
MD5 8abf02e8563a1b6b09d98695cc2d74f6
SHA1 833aba3eff21fdebe3e593be02a95e568eab8a47
SHA512 d131dc38bb1c7f55f60f28ea8d11a4b9ce5e75b9a6790455edc9079f36ddf88b0c27fedbc7e454eaa8876e86b1d6363e107ed776f558183421b4f460534ca8bf
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.empromae.com
Port
587
Username
[email protected]
Password
Mrchukwu12345

Targets

- Target
  PO-2.exe
- Size 863KB
- SHA256 551d7e7353f2a10adb0e057e0fda9bf048ca9e9aa2e7498566e0b9b58879c2f8
- MD5 8abf02e8563a1b6b09d98695cc2d74f6
- SHA1 833aba3eff21fdebe3e593be02a95e568eab8a47
- SHA512 d131dc38bb1c7f55f60f28ea8d11a4b9ce5e75b9a6790455edc9079f36ddf88b0c27fedbc7e454eaa8876e86b1d6363e107ed776f558183421b4f460534ca8bf
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2