agenttesla | bbb1cd2d138cd5331c4a1ef19a81688c45704fe3e96dbda7b7ffd8317b70fd84 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ADDITIONAL COST OFFER FOR TB & HILTI SHOWROOMS (FACADE ALUMINIUM COMPOSED PANEL CLADDIND (COMMENTED) (13.07.2020.pdf (322 KB).exe
Size 603KB
Sample200830-3mh26dvcp2
SHA256 bbb1cd2d138cd5331c4a1ef19a81688c45704fe3e96dbda7b7ffd8317b70fd84
MD5 8788dca57f90d886f7b9c0397e9e75c7
SHA1 6fc262230a2b2f63fb0989fe2077d9e2d7e10a7c
SHA512 a3f504e8f5d4166e6e3a2e745d2392e8096bbd8ce9090a489a08b2b5cf2cdee1f7ea104dc67f8dc3e97ab3af1d482dc32f1335b164c2f937982bb1abb6777961
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
castor123@

Targets

- Target
  ADDITIONAL COST OFFER FOR TB & HILTI SHOWROOMS (FACADE ALUMINIUM COMPOSED PANEL CLADDIND (COMMENTED) (13.07.2020.pdf (322 KB).exe
- Size 603KB
- SHA256 bbb1cd2d138cd5331c4a1ef19a81688c45704fe3e96dbda7b7ffd8317b70fd84
- MD5 8788dca57f90d886f7b9c0397e9e75c7
- SHA1 6fc262230a2b2f63fb0989fe2077d9e2d7e10a7c
- SHA512 a3f504e8f5d4166e6e3a2e745d2392e8096bbd8ce9090a489a08b2b5cf2cdee1f7ea104dc67f8dc3e97ab3af1d482dc32f1335b164c2f937982bb1abb6777961
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan