agenttesla | 7372e91ca331f6ae841f5251de3ee8d34084f96cd089c8d56b8a600767d76a16 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
URGENT_PURCHASE_ORDER_IMG0000345.EXE
Size 499KB
Sample201109-d4e5n7x982
SHA256 7372e91ca331f6ae841f5251de3ee8d34084f96cd089c8d56b8a600767d76a16
MD5 bb9b12a5f7197926bddfd2dadf8beaf9
SHA1 cedf4d1ae48e2832d8d85a0f544dcd0d6e94362c
SHA512 62f24b3f1cc3ddc64a6b066508492321b2383dfddf09c40cffe01cff4526e999ad34d6d4f41a5f9de334cf8c1a8e673528da215c192f7179a1fc9e91f72272b1
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
elninoorigin.cf
Port
587
Username
[email protected]
Password
Spoofyou2015$

Targets

- Target
  URGENT_PURCHASE_ORDER_IMG0000345.EXE
- Size 499KB
- SHA256 7372e91ca331f6ae841f5251de3ee8d34084f96cd089c8d56b8a600767d76a16
- MD5 bb9b12a5f7197926bddfd2dadf8beaf9
- SHA1 cedf4d1ae48e2832d8d85a0f544dcd0d6e94362c
- SHA512 62f24b3f1cc3ddc64a6b066508492321b2383dfddf09c40cffe01cff4526e999ad34d6d4f41a5f9de334cf8c1a8e673528da215c192f7179a1fc9e91f72272b1
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan