agenttesla | b8d5ab09f5c61b3902912efe4b0ce4fb9de4e6725a026cce18096c890b2a6ee9 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Zahlungskopie.exe
Size 613KB
Sample201113-2behrq26ge
SHA256 b8d5ab09f5c61b3902912efe4b0ce4fb9de4e6725a026cce18096c890b2a6ee9
MD5 8c6034dce1c943a9597d99fd01c0999c
SHA1 3b3ab99357b593d7d2454b3b4a2fb2264825e285
SHA512 3753a3e276c7a8acdd5f83813fe58ab1a4876843e2030493d8e0df885b315cf061e81cee0b19e9398ceb1de913289ac0c4dc53bfa3e6d88e86349d447426563d
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.greatdeck.co
Port
587
Username
[email protected]
Password
Greatd@2018$!

Targets

- Target
  Zahlungskopie.exe
- Size 613KB
- SHA256 b8d5ab09f5c61b3902912efe4b0ce4fb9de4e6725a026cce18096c890b2a6ee9
- MD5 8c6034dce1c943a9597d99fd01c0999c
- SHA1 3b3ab99357b593d7d2454b3b4a2fb2264825e285
- SHA512 3753a3e276c7a8acdd5f83813fe58ab1a4876843e2030493d8e0df885b315cf061e81cee0b19e9398ceb1de913289ac0c4dc53bfa3e6d88e86349d447426563d
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan