agenttesla | 3e0f73ce13623cee18d55d11189dec1fa8d3a7fe10246f29c9124ecc752b7a30 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
NEW ORDER PO 30.07.20.exe
Size 771KB
Sample200730-mt194bdxex
SHA256 3e0f73ce13623cee18d55d11189dec1fa8d3a7fe10246f29c9124ecc752b7a30
MD5 9ed34d32a86794d0f5b88d72233569cc
SHA1 a227da42025ed4c4a61bcb4b7b995ac868407bb2
SHA512 51048684a5e20932d65bd02af97ff200b55398f0fcbc23f8c78eda1a64d0a82fbd9db4c41791b6bdc79bf1fddaefaf5329caf110596c6a0767b2076d8d480df9
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
faith12AB

Targets

- Target
  NEW ORDER PO 30.07.20.exe
- Size 771KB
- SHA256 3e0f73ce13623cee18d55d11189dec1fa8d3a7fe10246f29c9124ecc752b7a30
- MD5 9ed34d32a86794d0f5b88d72233569cc
- SHA1 a227da42025ed4c4a61bcb4b7b995ac868407bb2
- SHA512 51048684a5e20932d65bd02af97ff200b55398f0fcbc23f8c78eda1a64d0a82fbd9db4c41791b6bdc79bf1fddaefaf5329caf110596c6a0767b2076d8d480df9
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2