agenttesla | 2358ed95f04bcb2b05cacf8168d2da545c095b2da8163525102824c668d3e643 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Pagamento.exe
Size 623KB
Sample201103-1l89y59fp6
SHA256 2358ed95f04bcb2b05cacf8168d2da545c095b2da8163525102824c668d3e643
MD5 2fbb583acc17115ee7443d72926bd7e8
SHA1 c928ffbd4aa43afaaf898d11b2a38024259254a5
SHA512 47590c6844ffca390c45a8e37b8c0faeb1ac633bf98b15a243afddf9925039732ab99f6997ad51f24b1cc13b978037e5a206ff807bb6175de4633605cc0bc560
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.ebop.website
Port
587
Username
[email protected]
Password
P@ssw0rdP@ssw0rd

Targets

- Target
  Pagamento.exe
- Size 623KB
- SHA256 2358ed95f04bcb2b05cacf8168d2da545c095b2da8163525102824c668d3e643
- MD5 2fbb583acc17115ee7443d72926bd7e8
- SHA1 c928ffbd4aa43afaaf898d11b2a38024259254a5
- SHA512 47590c6844ffca390c45a8e37b8c0faeb1ac633bf98b15a243afddf9925039732ab99f6997ad51f24b1cc13b978037e5a206ff807bb6175de4633605cc0bc560
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan