agenttesla | 437d00efdb3e3514135b55fc3574fdf4e109d527f2c998bf614ceb33088effdf | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
new order.exe
Size 1.5MB
Sample201109-mrvdf2hkfx
SHA256 437d00efdb3e3514135b55fc3574fdf4e109d527f2c998bf614ceb33088effdf
MD5 0de18d164e75ab0d3e622ffd37b976f7
SHA1 d02597105fa9333d4c250dbe4bbc661a0f4b7da3
SHA512 d9a95f2360d2e5de3f8f063dcc277e24467ef0fa162757b0efc90376bc288ba77c560e6274fa907838c8259e6e5ab1e2850da793e0890511dcb3aa4de2bad2e2
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.tipusurgical.com
Port
587
Username
[email protected]
Password
ALLAHHOAKBAR786

Targets

- Target
  new order.exe
- Size 1.5MB
- SHA256 437d00efdb3e3514135b55fc3574fdf4e109d527f2c998bf614ceb33088effdf
- MD5 0de18d164e75ab0d3e622ffd37b976f7
- SHA1 d02597105fa9333d4c250dbe4bbc661a0f4b7da3
- SHA512 d9a95f2360d2e5de3f8f063dcc277e24467ef0fa162757b0efc90376bc288ba77c560e6274fa907838c8259e6e5ab1e2850da793e0890511dcb3aa4de2bad2e2
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan