agenttesla | cca90e3d9da209fea67333dafd2d7882f498f1c0023432f0ab6f05a3ca430b19 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Price list & Specs.exe
Size 1.5MB
Sample201109-alc9ab1ex2
SHA256 cca90e3d9da209fea67333dafd2d7882f498f1c0023432f0ab6f05a3ca430b19
MD5 515e6ac9da9b7e29458457f2a892fccf
SHA1 c940dd7966a63f87946a2a0cce99eaef1129fc79
SHA512 b47a3525b5bbbfed517e2a54b78d98303c44a0f75d855f3743a8ba036fd97c6221d312bc0953fd7c20ffb218b22e68b9aedf9af686cb098d8933f76efc3793b3
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
104socceryandex

Targets

- Target
  Price list & Specs.exe
- Size 1.5MB
- SHA256 cca90e3d9da209fea67333dafd2d7882f498f1c0023432f0ab6f05a3ca430b19
- MD5 515e6ac9da9b7e29458457f2a892fccf
- SHA1 c940dd7966a63f87946a2a0cce99eaef1129fc79
- SHA512 b47a3525b5bbbfed517e2a54b78d98303c44a0f75d855f3743a8ba036fd97c6221d312bc0953fd7c20ffb218b22e68b9aedf9af686cb098d8933f76efc3793b3
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan