agenttesla | d8893925a5d8f9574be0f322355b79372e9c58dacc1e7737223a7b96e53fe4f6 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
pfa.exe
Size 708KB
Sample200803-6d5blms8ps
SHA256 d8893925a5d8f9574be0f322355b79372e9c58dacc1e7737223a7b96e53fe4f6
MD5 dfc2751a52a05589197842334f0f925b
SHA1 be9c027b42b86cf4eb3c672ac3fcfb777ce3b6d5
SHA512 248bd015c59caec5d97bea68813954255989066fca173e25a56d8ce214f9ef4216157f68a87d3b705ae4842aa3be65f5fc2297ce694a990d503792a27cfa9357
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.millndustries.com
Port
587
Username
[email protected]
Password
E:rr0+#Jxz1b

Targets

- Target
  pfa.exe
- Size 708KB
- SHA256 d8893925a5d8f9574be0f322355b79372e9c58dacc1e7737223a7b96e53fe4f6
- MD5 dfc2751a52a05589197842334f0f925b
- SHA1 be9c027b42b86cf4eb3c672ac3fcfb777ce3b6d5
- SHA512 248bd015c59caec5d97bea68813954255989066fca173e25a56d8ce214f9ef4216157f68a87d3b705ae4842aa3be65f5fc2297ce694a990d503792a27cfa9357
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2