agenttesla | 77e7fb63d8ead8a0eb26e033cba63599507028ca5a12ea6439f0cf8f9e52d5ce | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
AWB & Invoice -TNT Shipment.exe
Size 703KB
Sample200812-b4cbtpvlyx
SHA256 77e7fb63d8ead8a0eb26e033cba63599507028ca5a12ea6439f0cf8f9e52d5ce
MD5 21d1d0234c2ef7d6746ba3c0d7d13001
SHA1 c4dfc48ef3fe25b5ad3d48ebbbe210804620ba26
SHA512 53e6b4407c57451c659120f112f55d2ec90846062867719d40695a45881ad3699d36fd1607e0f722a8ff3c806c6cdd4dff1ce700652ea88ef92b658efc925443
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.ru
Port
587
Username
[email protected]
Password
^#@&^54433333

Targets

- Target
  AWB & Invoice -TNT Shipment.exe
- Size 703KB
- SHA256 77e7fb63d8ead8a0eb26e033cba63599507028ca5a12ea6439f0cf8f9e52d5ce
- MD5 21d1d0234c2ef7d6746ba3c0d7d13001
- SHA1 c4dfc48ef3fe25b5ad3d48ebbbe210804620ba26
- SHA512 53e6b4407c57451c659120f112f55d2ec90846062867719d40695a45881ad3699d36fd1607e0f722a8ff3c806c6cdd4dff1ce700652ea88ef92b658efc925443
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan