agenttesla | a3d2f3554c4effeb330f38e85abff7c23a37c0078cd8ddcabd7f7f61809db8a3 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Purchase Order#60012396.exe
Size 582KB
Sample201016-yh8dc4p8fa
SHA256 a3d2f3554c4effeb330f38e85abff7c23a37c0078cd8ddcabd7f7f61809db8a3
MD5 47e22365d085beb62dbc05bcd7f99a05
SHA1 a9b5b1a95005935803f787dc374761bc63c81d3e
SHA512 b193b0143b52ec2a16a44b574b6dcdc83f19eff9cd987c90b96be1cb08f40d3bef964a3cf9a03782ee7148c6538ceacca96ae1ea59b9054547611897b8dec0d3
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.ru
Port
587
Username
[email protected]
Password
pmoneyboy994

Targets

- Target
  Purchase Order#60012396.exe
- Size 582KB
- SHA256 a3d2f3554c4effeb330f38e85abff7c23a37c0078cd8ddcabd7f7f61809db8a3
- MD5 47e22365d085beb62dbc05bcd7f99a05
- SHA1 a9b5b1a95005935803f787dc374761bc63c81d3e
- SHA512 b193b0143b52ec2a16a44b574b6dcdc83f19eff9cd987c90b96be1cb08f40d3bef964a3cf9a03782ee7148c6538ceacca96ae1ea59b9054547611897b8dec0d3
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan