agenttesla | 74b7a02e49c6319963fefe23a1736cf16bfd63ebb672a541d97c95601f840a49 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
QUOTE 008331.pdf.exe
Size 487KB
Sample200731-c69ctjx34e
SHA256 74b7a02e49c6319963fefe23a1736cf16bfd63ebb672a541d97c95601f840a49
MD5 70655c720bc1938bf9bca6bd143e5fbe
SHA1 82d1f8b9f0490b8272ace3240c024c9ff592c4dd
SHA512 a684ea191d8560576ab33949dfcc302188ee504b761c89b646e786f147e9e2a7ca1808c1e0ffd7c5575ecab0962df6d2cd7e22d0736ec0b9aebed28e73d484a3
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
sOeKk#E6

Targets

- Target
  QUOTE 008331.pdf.exe
- Size 487KB
- SHA256 74b7a02e49c6319963fefe23a1736cf16bfd63ebb672a541d97c95601f840a49
- MD5 70655c720bc1938bf9bca6bd143e5fbe
- SHA1 82d1f8b9f0490b8272ace3240c024c9ff592c4dd
- SHA512 a684ea191d8560576ab33949dfcc302188ee504b761c89b646e786f147e9e2a7ca1808c1e0ffd7c5575ecab0962df6d2cd7e22d0736ec0b9aebed28e73d484a3
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2