agenttesla | 314843bc96cbfa3115bc86edd37758ecdaaf6af6ae543a64014e921fda7294fb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Purchase Order Needed.Pdf.exe
Size 1.0MB
Sample201109-ymk9rtb6ge
SHA256 314843bc96cbfa3115bc86edd37758ecdaaf6af6ae543a64014e921fda7294fb
MD5 a67bd793586a4318710f2ea5f708124a
SHA1 b15d5ffc7a92073b248dd8ced531dd74e226a069
SHA512 66adc8b61a06c2c3a8b84c30829939ca42731b2b0cf03e8776d87a0baec389807525234e95ee83927bb9cb48b58358e18b297711596b8521a1c969faa36e80c1
MD5 SHA1 SHA512

Score

10^/10

agenttesla nanocore keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.gmail.com
Port
587
Username
[email protected]
Password
iefjtgbwxjcwxeww

Targets

- Target
  Purchase Order Needed.Pdf.exe
- Size 1.0MB
- SHA256 314843bc96cbfa3115bc86edd37758ecdaaf6af6ae543a64014e921fda7294fb
- MD5 a67bd793586a4318710f2ea5f708124a
- SHA1 b15d5ffc7a92073b248dd8ced531dd74e226a069
- SHA512 66adc8b61a06c2c3a8b84c30829939ca42731b2b0cf03e8776d87a0baec389807525234e95ee83927bb9cb48b58358e18b297711596b8521a1c969faa36e80c1
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan nanocore
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- NanoCore
  NanoCore is a remote access tool (RAT) with a variety of capabilities.
  keylogger trojan stealer spyware nanocore
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslananocorekeyloggerspywarestealertrojan