agenttesla | 62da90f49f3a05c5daeb2b9a5edafa5e67cb8e2b32929ce7cb800a706af1d99f | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
STATEMENT OF ACCOUNT.exe
Size 1.5MB
Sample201007-4vrayqng6j
SHA256 62da90f49f3a05c5daeb2b9a5edafa5e67cb8e2b32929ce7cb800a706af1d99f
MD5 4d3851cde38adbb1d797e6f202fb8f98
SHA1 c39b0a81c603bb7f3affcb15f3bbe447ed03f50f
SHA512 a66782c6401987397efd515b553b236338f5870d7b8897878feb6bc6be5cc419e803658e71b4cbe286faa49e3cff9dcf44ea4d91fbb46c66e38dddaa3130a2fd
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.goldenamoonresorts.com
Port
587
Username
[email protected]
Password
golden@123

Targets

- Target
  STATEMENT OF ACCOUNT.exe
- Size 1.5MB
- SHA256 62da90f49f3a05c5daeb2b9a5edafa5e67cb8e2b32929ce7cb800a706af1d99f
- MD5 4d3851cde38adbb1d797e6f202fb8f98
- SHA1 c39b0a81c603bb7f3affcb15f3bbe447ed03f50f
- SHA512 a66782c6401987397efd515b553b236338f5870d7b8897878feb6bc6be5cc419e803658e71b4cbe286faa49e3cff9dcf44ea4d91fbb46c66e38dddaa3130a2fd
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2