agenttesla | 2f42e1baa78e2d7160734d4a9a849cff5f95cc2f7dfa161aa9c62429a0058dbe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
shipping doument (2).exe
Size 576KB
Sample200803-phk7ks5cs2
SHA256 2f42e1baa78e2d7160734d4a9a849cff5f95cc2f7dfa161aa9c62429a0058dbe
MD5 be972a180fd821b056aa2992061a1d48
SHA1 fa50dbbba237806e5dce0a4238e22533ed0ad18d
SHA512 dabfc3d82c322ed940de70cd3ca99f8ac0959bf611a26cc56ab52e87ef230e280ad3d79be4983a2f841d75db9c57b9a93aed16e7b85ae6b0a31ce4015a1a1732
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.millndustries.com
Port
587
Username
[email protected]
Password
s@X?j9y~sK3g

Targets

- Target
  shipping doument (2).exe
- Size 576KB
- SHA256 2f42e1baa78e2d7160734d4a9a849cff5f95cc2f7dfa161aa9c62429a0058dbe
- MD5 be972a180fd821b056aa2992061a1d48
- SHA1 fa50dbbba237806e5dce0a4238e22533ed0ad18d
- SHA512 dabfc3d82c322ed940de70cd3ca99f8ac0959bf611a26cc56ab52e87ef230e280ad3d79be4983a2f841d75db9c57b9a93aed16e7b85ae6b0a31ce4015a1a1732
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2