agenttesla | 7cda85f907b4c3ccfaa685dea286841e56dc5c2895c5d7992398aba433af93bf | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
inquiry_list_market price_00232.pdf.exe
Size 1.4MB
Sample201109-xgm2cdkwhn
SHA256 7cda85f907b4c3ccfaa685dea286841e56dc5c2895c5d7992398aba433af93bf
MD5 73ccbcc1c0e81c69757fcb7cb08fdeac
SHA1 45ef7d8764dc0f3e13faf496ec221bfd6a9ba0b4
SHA512 d579c96cdf75419349d7cd0e574f89569d6bb40b28b7e7cfb891da9b31dcddaeed5b9a07bf37581e27d5cbc3a191e88f5d8378a12d09b8fd3783c6a2b41f6079
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
Smtp.yandex.com
Port
587
Username
[email protected]
Password
ethememir2007

Targets

- Target
  inquiry_list_market price_00232.pdf.exe
- Size 1.4MB
- SHA256 7cda85f907b4c3ccfaa685dea286841e56dc5c2895c5d7992398aba433af93bf
- MD5 73ccbcc1c0e81c69757fcb7cb08fdeac
- SHA1 45ef7d8764dc0f3e13faf496ec221bfd6a9ba0b4
- SHA512 d579c96cdf75419349d7cd0e574f89569d6bb40b28b7e7cfb891da9b31dcddaeed5b9a07bf37581e27d5cbc3a191e88f5d8378a12d09b8fd3783c6a2b41f6079
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan