agenttesla | bf1016ffb1ecdff1fa7b2b6773ee693cfc6e7e16bdfc467639fe9b60a7c9c668 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
NEW ORDER PO 15.08.20.exe
Size 444KB
Sample200815-as6vvefynj
SHA256 bf1016ffb1ecdff1fa7b2b6773ee693cfc6e7e16bdfc467639fe9b60a7c9c668
MD5 1fad23ed01cbcac7ad8ba778cfff0311
SHA1 2a2f3f25f82c16fdcad00ea263f8e4a74621875b
SHA512 2828177e339084f39f55142154026a02b3b364320573e9744ef64d667b166820297fcef591c911b33b2952c15435b560b05fc7f21d8f1ebc8479ef441ccfc66f
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
faith12AB

Targets

- Target
  NEW ORDER PO 15.08.20.exe
- Size 444KB
- SHA256 bf1016ffb1ecdff1fa7b2b6773ee693cfc6e7e16bdfc467639fe9b60a7c9c668
- MD5 1fad23ed01cbcac7ad8ba778cfff0311
- SHA1 2a2f3f25f82c16fdcad00ea263f8e4a74621875b
- SHA512 2828177e339084f39f55142154026a02b3b364320573e9744ef64d667b166820297fcef591c911b33b2952c15435b560b05fc7f21d8f1ebc8479ef441ccfc66f
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan