agenttesla | 82fed36e33e28ea2575e1d8e17ab4b34f03f72903f7b48ddaec1e2d021bb2c6d | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Bank Receipt.pdf.exe
Size 554KB
Sample200902-zkccysc9se
SHA256 82fed36e33e28ea2575e1d8e17ab4b34f03f72903f7b48ddaec1e2d021bb2c6d
MD5 ed5db7c8c76ae2a96a1e828771c39cce
SHA1 a558c9d39d87778b137d35d54c5f5c5790053881
SHA512 aa2d4fc5cef1987582f16cabc36df4306c9e3a1b182fd5c43cecc79c57e4665bdf9e49fe865b6d79d45111a3f11e6ea007d929d4d3db5cdee1f4307e19e81228
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
H(FPf]j;OgNA

Targets

- Target
  Bank Receipt.pdf.exe
- Size 554KB
- SHA256 82fed36e33e28ea2575e1d8e17ab4b34f03f72903f7b48ddaec1e2d021bb2c6d
- MD5 ed5db7c8c76ae2a96a1e828771c39cce
- SHA1 a558c9d39d87778b137d35d54c5f5c5790053881
- SHA512 aa2d4fc5cef1987582f16cabc36df4306c9e3a1b182fd5c43cecc79c57e4665bdf9e49fe865b6d79d45111a3f11e6ea007d929d4d3db5cdee1f4307e19e81228
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan