agenttesla | 02e422396eb123142575e0dcee9f629941c42543ae8839a931e2cc8eefecb9c4 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PURCHASE ORDER NO. PO2000254.exe
Size 583KB
Sample201022-pgwhh6xyf2
SHA256 02e422396eb123142575e0dcee9f629941c42543ae8839a931e2cc8eefecb9c4
MD5 28c20dfc4b76af746219e983fb1d4b5a
SHA1 4a58e22af89d30a1b9d2ba429ff5beb16d1bcab9
SHA512 eb5a598ad584f45dc789928bf6bc5aea01eb04b9bcf9e96c4a20d77d5f20b6393f8a9f97d519c7822b2abaf0150ea42ffeac2d573f681d2ecf63a0bc577be4d5
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
iykeraymond007

Targets

- Target
  PURCHASE ORDER NO. PO2000254.exe
- Size 583KB
- SHA256 02e422396eb123142575e0dcee9f629941c42543ae8839a931e2cc8eefecb9c4
- MD5 28c20dfc4b76af746219e983fb1d4b5a
- SHA1 4a58e22af89d30a1b9d2ba429ff5beb16d1bcab9
- SHA512 eb5a598ad584f45dc789928bf6bc5aea01eb04b9bcf9e96c4a20d77d5f20b6393f8a9f97d519c7822b2abaf0150ea42ffeac2d573f681d2ecf63a0bc577be4d5
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan