agenttesla | 7be3a3d6b712edfa50d8d5a443b5bd7719d57c9be6b7d34ebe2e3e4a7815e062 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
481b568abda95328ae140f840ce4b0ec.exe
Size 1.4MB
Sample201109-ll6nkfvst2
SHA256 7be3a3d6b712edfa50d8d5a443b5bd7719d57c9be6b7d34ebe2e3e4a7815e062
MD5 481b568abda95328ae140f840ce4b0ec
SHA1 bcbeee647fcc9d71a0bb5dc9c1e015d19c9f3aad
SHA512 7075f19297931647c60fc63710d6b0b593ac1773de63f5bab8f5d49f2e64200e29f2cff0da08187f825c7a811ea2b22a662420646a547056aba7d2f5c5813278
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  481b568abda95328ae140f840ce4b0ec.exe
- Size 1.4MB
- SHA256 7be3a3d6b712edfa50d8d5a443b5bd7719d57c9be6b7d34ebe2e3e4a7815e062
- MD5 481b568abda95328ae140f840ce4b0ec
- SHA1 bcbeee647fcc9d71a0bb5dc9c1e015d19c9f3aad
- SHA512 7075f19297931647c60fc63710d6b0b593ac1773de63f5bab8f5d49f2e64200e29f2cff0da08187f825c7a811ea2b22a662420646a547056aba7d2f5c5813278
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops startup file
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan