agenttesla | e0f4d5681c4d19ec5ea23db306f6956889ab939a392113ad631a31bdcbd57d21 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
5a.exe
Size 1.7MB
Sample201109-kvmffartwx
SHA256 e0f4d5681c4d19ec5ea23db306f6956889ab939a392113ad631a31bdcbd57d21
MD5 24739fb9e71cabc65cc2bca23e1b6b76
SHA1 2adc979c14551682920d4126252d666774be031e
SHA512 6fc41e7fa2e958089e720a6741ea68e360801ad5ff91d59f9ec7341aec95e55671a9cea2089eb0f3349fc8b854d4ca522dd6558c751e3c302a4a74b78f87ff55
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.hazelsystems.co.in
Port
587
Username
[email protected]
Password
hazel1995

Targets

- Target
  5a.exe
- Size 1.7MB
- SHA256 e0f4d5681c4d19ec5ea23db306f6956889ab939a392113ad631a31bdcbd57d21
- MD5 24739fb9e71cabc65cc2bca23e1b6b76
- SHA1 2adc979c14551682920d4126252d666774be031e
- SHA512 6fc41e7fa2e958089e720a6741ea68e360801ad5ff91d59f9ec7341aec95e55671a9cea2089eb0f3349fc8b854d4ca522dd6558c751e3c302a4a74b78f87ff55
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan