agenttesla | 9dc77917857b09b06426f7637f10582c8564327f900a7a8f3b6c386ab3ef13a8 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Quotation & Sample.exe
Size 1.4MB
Sample201109-jm6whbbzca
SHA256 9dc77917857b09b06426f7637f10582c8564327f900a7a8f3b6c386ab3ef13a8
MD5 59b1bc4c6f333033faa3355015b984f0
SHA1 901a180731f72ea1075258e296f3ed0ac2ceac67
SHA512 7c0907aac7da87c70521888b9d259172570861158b5f75fb0aef9ac6706ee258b6f1c3bd2cccad0c3f873e516b19d273c93a29464fc956b47f217152fb3124ba
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
anyanwu3116

Targets

- Target
  Quotation & Sample.exe
- Size 1.4MB
- SHA256 9dc77917857b09b06426f7637f10582c8564327f900a7a8f3b6c386ab3ef13a8
- MD5 59b1bc4c6f333033faa3355015b984f0
- SHA1 901a180731f72ea1075258e296f3ed0ac2ceac67
- SHA512 7c0907aac7da87c70521888b9d259172570861158b5f75fb0aef9ac6706ee258b6f1c3bd2cccad0c3f873e516b19d273c93a29464fc956b47f217152fb3124ba
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan