agenttesla | e1cbed7a232593e198fe8e3e687284856dfbbc9ca2863f0901745e64f2186f36 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
wire (5).exe
Size 1.4MB
Sample201109-9efszahe8a
SHA256 e1cbed7a232593e198fe8e3e687284856dfbbc9ca2863f0901745e64f2186f36
MD5 a0965bb015fbfd2014aa9fb0b869ed4a
SHA1 c145ea9422a637f39913338deea5c31529e14c31
SHA512 1548c4ee116ae244c361b3f616ac1a7727f06a375db17d6a8572621f89e1b27b74c4f4cd48d3916365462f47d9b705150105ac19a08a3fc5980edd9a6802037b
MD5 SHA1 SHA512

Score

10^/10

agenttesla nanocore keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.mkkarakosemobilya.com
Port
587
Username
[email protected]
Password
MKkkmbly@2019

Targets

- Target
  wire (5).exe
- Size 1.4MB
- SHA256 e1cbed7a232593e198fe8e3e687284856dfbbc9ca2863f0901745e64f2186f36
- MD5 a0965bb015fbfd2014aa9fb0b869ed4a
- SHA1 c145ea9422a637f39913338deea5c31529e14c31
- SHA512 1548c4ee116ae244c361b3f616ac1a7727f06a375db17d6a8572621f89e1b27b74c4f4cd48d3916365462f47d9b705150105ac19a08a3fc5980edd9a6802037b
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan nanocore
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- NanoCore
  NanoCore is a remote access tool (RAT) with a variety of capabilities.
  keylogger trojan stealer spyware nanocore
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslananocorekeyloggerspywarestealertrojan