agenttesla | 558b8c8aefc1c9d95edc73a36381ce4a4f1a3de33208dad867d8b74d9d20aa3b | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
compromiso de pago.scr
Size 1.5MB
Sample201109-6lt7f6ppne
SHA256 558b8c8aefc1c9d95edc73a36381ce4a4f1a3de33208dad867d8b74d9d20aa3b
MD5 ad31aba7d58894438239e2421642335c
SHA1 3d72434c3818a08e20d57852443b604156a61786
SHA512 9e923ed6383c217d7350dde95bbaf0e3fa3f1fd22ab5f3bd782c09bf4c1633bda87759ed735ef279051f423be4668d2268902fa018846f26fbe22fa344e14ef7
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
fresh826699

Targets

- Target
  compromiso de pago.scr
- Size 1.5MB
- SHA256 558b8c8aefc1c9d95edc73a36381ce4a4f1a3de33208dad867d8b74d9d20aa3b
- MD5 ad31aba7d58894438239e2421642335c
- SHA1 3d72434c3818a08e20d57852443b604156a61786
- SHA512 9e923ed6383c217d7350dde95bbaf0e3fa3f1fd22ab5f3bd782c09bf4c1633bda87759ed735ef279051f423be4668d2268902fa018846f26fbe22fa344e14ef7
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan