agenttesla | ded450af998de45b6a1ac415f262e047e7bd173b152e61d2cbe26877ddafe706 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Enquiry.exe
Size 1.9MB
Sample201109-j4qtvdvmvs
SHA256 ded450af998de45b6a1ac415f262e047e7bd173b152e61d2cbe26877ddafe706
MD5 135d8d4f91a864a8f26105d4b760f5cf
SHA1 b12ce8091abd9127a0a7c6c2407f6649867a68fb
SHA512 555a4ac49f49bfff68700d9e3303c64901628c1af032943a569faa4c1e50bf37e3150b63a39db830ffbea6483e92b5b93d69162296da689f2db6d6071b936b9f
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.dormakeba.com
Port
587
Username
[email protected]
Password
]b!JtPxUT=)T

Targets

- Target
  Enquiry.exe
- Size 1.9MB
- SHA256 ded450af998de45b6a1ac415f262e047e7bd173b152e61d2cbe26877ddafe706
- MD5 135d8d4f91a864a8f26105d4b760f5cf
- SHA1 b12ce8091abd9127a0a7c6c2407f6649867a68fb
- SHA512 555a4ac49f49bfff68700d9e3303c64901628c1af032943a569faa4c1e50bf37e3150b63a39db830ffbea6483e92b5b93d69162296da689f2db6d6071b936b9f
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan