agenttesla | e0b95a4255056cbad985d2d8e2ef1ab22720b758af99bd8d15a5d2d81d650fff | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
QUOTE B1307.pdf.exe
Size 599KB
Sample200812-878kehtesx
SHA256 e0b95a4255056cbad985d2d8e2ef1ab22720b758af99bd8d15a5d2d81d650fff
MD5 c8a3944d68f87728d166653b71d44de5
SHA1 528d3912a8cb1322b7afc32948139813fd7b74db
SHA512 e24500bc93fcf500af14420e43bf82c1243c4cd8247bfa0ab962110cef3697eb5f6e4a6f42b3227f6eb027c7cd10a99eae69deff3d6a325c53bad331b8d00678
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
sOeKk#E6

Targets

- Target
  QUOTE B1307.pdf.exe
- Size 599KB
- SHA256 e0b95a4255056cbad985d2d8e2ef1ab22720b758af99bd8d15a5d2d81d650fff
- MD5 c8a3944d68f87728d166653b71d44de5
- SHA1 528d3912a8cb1322b7afc32948139813fd7b74db
- SHA512 e24500bc93fcf500af14420e43bf82c1243c4cd8247bfa0ab962110cef3697eb5f6e4a6f42b3227f6eb027c7cd10a99eae69deff3d6a325c53bad331b8d00678
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan