agenttesla | fa0ac43dbbc556f1f34ec4a98447596ac837034c10edaddc8e4dfb0549b508be | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
MT023POe.exe
Size 1.7MB
Sample201109-w8x1kdfsdx
SHA256 fa0ac43dbbc556f1f34ec4a98447596ac837034c10edaddc8e4dfb0549b508be
MD5 da629ab292b78a386d9a66f17e2d26e9
SHA1 7cf0a62a9e98d531612281214a3f2c298541d670
SHA512 d6f741842aabada63adf198cfc4421a6be20e95646e2d7ad06e0e90480f023ff9f2ab88797c95dc3188e52adc9d9d9dff6f237c611f87750073adbcc736663b5
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  MT023POe.exe
- Size 1.7MB
- SHA256 fa0ac43dbbc556f1f34ec4a98447596ac837034c10edaddc8e4dfb0549b508be
- MD5 da629ab292b78a386d9a66f17e2d26e9
- SHA1 7cf0a62a9e98d531612281214a3f2c298541d670
- SHA512 d6f741842aabada63adf198cfc4421a6be20e95646e2d7ad06e0e90480f023ff9f2ab88797c95dc3188e52adc9d9d9dff6f237c611f87750073adbcc736663b5
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops startup file
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan