agenttesla | 07b55ae89038136fc1da21d2aaea7b9e6d17ea18843d26f9bbcad7124eb5f1be | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SWIFT_COPY_FOR URGENT_RESPOSNSE_sw356388838.exe
Size 1.4MB
Sample201109-bteqkl1fej
SHA256 07b55ae89038136fc1da21d2aaea7b9e6d17ea18843d26f9bbcad7124eb5f1be
MD5 2fc3fdaeda173710cb9a6bb5e8a993d8
SHA1 2032c807e034d5e87ddfcd80e1b54d01e9d52684
SHA512 1663370a176e6b7ecbf0786504f7069d2b4d03fe0b40c73b2616c45671f748a9b6ac3d7da9584d0bb67f78d4f9af52ba3a66931792086fdace393ac1df2de2e3
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  SWIFT_COPY_FOR URGENT_RESPOSNSE_sw356388838.exe
- Size 1.4MB
- SHA256 07b55ae89038136fc1da21d2aaea7b9e6d17ea18843d26f9bbcad7124eb5f1be
- MD5 2fc3fdaeda173710cb9a6bb5e8a993d8
- SHA1 2032c807e034d5e87ddfcd80e1b54d01e9d52684
- SHA512 1663370a176e6b7ecbf0786504f7069d2b4d03fe0b40c73b2616c45671f748a9b6ac3d7da9584d0bb67f78d4f9af52ba3a66931792086fdace393ac1df2de2e3
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan