agenttesla | dca8d76c88ee16a9e17e7481f2912e955530296f6ce71e77db7dbadcbffc5c19 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
QUOTE B1018586.pdf.exe
Size 740KB
Sample201012-93fv6qb5cs
SHA256 dca8d76c88ee16a9e17e7481f2912e955530296f6ce71e77db7dbadcbffc5c19
MD5 ef08fe81f9017fb9a549548e8a789dc1
SHA1 a250b6829e91d72e97e4c220f3e325d6b5a12e1e
SHA512 6dab4c50d4552633896886a344efed5d6c22b7672c1d9845302ff75fdb0abb96d717fe490460c343a262dd24512a226d07ac802794eab6858522c1d3c806c619
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
CHIDEX123

Targets

- Target
  QUOTE B1018586.pdf.exe
- Size 740KB
- SHA256 dca8d76c88ee16a9e17e7481f2912e955530296f6ce71e77db7dbadcbffc5c19
- MD5 ef08fe81f9017fb9a549548e8a789dc1
- SHA1 a250b6829e91d72e97e4c220f3e325d6b5a12e1e
- SHA512 6dab4c50d4552633896886a344efed5d6c22b7672c1d9845302ff75fdb0abb96d717fe490460c343a262dd24512a226d07ac802794eab6858522c1d3c806c619
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan