agenttesla | 6b289f4c862c4205a7debaa7217dfad7e66b56dcd3274e9b4ee530aa0e380037 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
G1HSlFmaoOFnQh8.exe
Size 433KB
Sample200818-a8b2vxwm1e
SHA256 6b289f4c862c4205a7debaa7217dfad7e66b56dcd3274e9b4ee530aa0e380037
MD5 a02cebdf6de7953fd7ebb3d5640408ca
SHA1 40fa21dc2628cf2ef2dad5f04080ff3c87c0765f
SHA512 fe1db44d70003b06b71c66bf21786c412f1f4fc4c21c40548d894534a04acc3d6f95004b190a812b428e2f176f452ef4ca43742fd3f9ea43bcf316c7b9454527
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
b}j8vkJ5iJ##

Targets

- Target
  G1HSlFmaoOFnQh8.exe
- Size 433KB
- SHA256 6b289f4c862c4205a7debaa7217dfad7e66b56dcd3274e9b4ee530aa0e380037
- MD5 a02cebdf6de7953fd7ebb3d5640408ca
- SHA1 40fa21dc2628cf2ef2dad5f04080ff3c87c0765f
- SHA512 fe1db44d70003b06b71c66bf21786c412f1f4fc4c21c40548d894534a04acc3d6f95004b190a812b428e2f176f452ef4ca43742fd3f9ea43bcf316c7b9454527
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan