agenttesla | f749fcdcc06750ec8e3839b52ddd13e9a2023673da83aefe1c13439e1351fab5 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
NEW ORDER PO 18.08.20.exe
Size 399KB
Sample200818-fr4c4n63ha
SHA256 f749fcdcc06750ec8e3839b52ddd13e9a2023673da83aefe1c13439e1351fab5
MD5 ccf52fc5bc915ee7d6b31b13afbf3213
SHA1 d16c079cb879ab4ebdb6fdaa0baa3dcfe45270db
SHA512 7d603c8382aaf8ac5b44442548528082b17e0415b11e52be6262d8be0ec6111b1447816b80393d1093e4600f69ab1fdd79646ce99f90c7911d770cbfa0ef0df0
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
faith12AB

Targets

- Target
  NEW ORDER PO 18.08.20.exe
- Size 399KB
- SHA256 f749fcdcc06750ec8e3839b52ddd13e9a2023673da83aefe1c13439e1351fab5
- MD5 ccf52fc5bc915ee7d6b31b13afbf3213
- SHA1 d16c079cb879ab4ebdb6fdaa0baa3dcfe45270db
- SHA512 7d603c8382aaf8ac5b44442548528082b17e0415b11e52be6262d8be0ec6111b1447816b80393d1093e4600f69ab1fdd79646ce99f90c7911d770cbfa0ef0df0
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan