agenttesla | 8982509c213f138ffee3d2e0a307d8cf454d5b23f0b23b6e26c05c68972e22a8 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PO. FSTG-2005007 DOCS_PDF.exe
Size 363KB
Sample200717-va8c8r8cfj
SHA256 8982509c213f138ffee3d2e0a307d8cf454d5b23f0b23b6e26c05c68972e22a8
MD5 8bef8900f34574739b19d74949786810
SHA1 338d6be1419cea133ecdcc3971318bb76b17a051
SHA512 8cd7b874f4d61e6991951b0b68e06ec220503bc42328215756445ae33f9832c002d4b4b59aeae2097d7c0603a918a8a8cf1fb1d406f0e2ef71e68e75f73b7d03
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.urban.co.th
Port
587
Username
[email protected]
Password
Urban@1143

Targets

- Target
  PO. FSTG-2005007 DOCS_PDF.exe
- Size 363KB
- SHA256 8982509c213f138ffee3d2e0a307d8cf454d5b23f0b23b6e26c05c68972e22a8
- MD5 8bef8900f34574739b19d74949786810
- SHA1 338d6be1419cea133ecdcc3971318bb76b17a051
- SHA512 8cd7b874f4d61e6991951b0b68e06ec220503bc42328215756445ae33f9832c002d4b4b59aeae2097d7c0603a918a8a8cf1fb1d406f0e2ef71e68e75f73b7d03
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2