agenttesla | f7528188692c18bb7e9f48e7951fecee4ce70e99e7787e0ea48ea80bc8cc1fe9 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
DHL KULI500796821_PO200000035_SCAN DOCS.exe
Size 562KB
Sample200721-bf6c7nletx
SHA256 f7528188692c18bb7e9f48e7951fecee4ce70e99e7787e0ea48ea80bc8cc1fe9
MD5 4744355f6e6c12a57c90eff4fce7b3e2
SHA1 00a74c07b570b677a8f2a836dcb6b114f5c0b053
SHA512 fb8ca136394d0da730eef83cb1afeceec0c23d549acd8ba608dcd4e743136185aa8049814d881af9694f104e7ba79acc58866b7afdf7145fc0df23cc289c305b
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
faith12AB

Targets

- Target
  DHL KULI500796821_PO200000035_SCAN DOCS.exe
- Size 562KB
- SHA256 f7528188692c18bb7e9f48e7951fecee4ce70e99e7787e0ea48ea80bc8cc1fe9
- MD5 4744355f6e6c12a57c90eff4fce7b3e2
- SHA1 00a74c07b570b677a8f2a836dcb6b114f5c0b053
- SHA512 fb8ca136394d0da730eef83cb1afeceec0c23d549acd8ba608dcd4e743136185aa8049814d881af9694f104e7ba79acc58866b7afdf7145fc0df23cc289c305b
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2