agenttesla | 319e69233a48d2dfc8f683b13df518bb837d0669a29af60ce19db914e562fa6a | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
D82031957A2BE27B7EC6599082D095EA
Size 1.4MB
Sample201015-8xsp8j96l2
SHA256 319e69233a48d2dfc8f683b13df518bb837d0669a29af60ce19db914e562fa6a
MD5 d82031957a2be27b7ec6599082d095ea
SHA1 82e10e77db9fefee2bd7799eb5e68967e5c337c6
SHA512 e7e2fb200967d966b82f979a77481f3df7bd0eb61565746e80e8135f6deb380a7ecb391ac114d0b04b51c32bc0658cfc54ebd316bd084052985a2589427a013d
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.olmsac.com
Port
587
Username
[email protected]
Password
lhErn@ndez19

Targets

- Target
  D82031957A2BE27B7EC6599082D095EA
- Size 1.4MB
- SHA256 319e69233a48d2dfc8f683b13df518bb837d0669a29af60ce19db914e562fa6a
- MD5 d82031957a2be27b7ec6599082d095ea
- SHA1 82e10e77db9fefee2bd7799eb5e68967e5c337c6
- SHA512 e7e2fb200967d966b82f979a77481f3df7bd0eb61565746e80e8135f6deb380a7ecb391ac114d0b04b51c32bc0658cfc54ebd316bd084052985a2589427a013d
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops startup file
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2