agenttesla | 693e675d00cbdc446dd08caa1a50d6fea6bef5c44e2e4ba0d45160f25daa0762 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
693e675d00cbdc446dd08caa1a50d6fea6bef5c44e2e4ba0d45160f25daa0762
Size 623KB
Sample201114-8nzdsvx366
SHA256 693e675d00cbdc446dd08caa1a50d6fea6bef5c44e2e4ba0d45160f25daa0762
MD5 c5be5e8ff978dee30f7308fb873cceca
SHA1 1350e3fd471dee343862c1846f1b47db88d15ccb
SHA512 b93dc6fc97b406458831321a3f1882da04d47bfa66804256dbc348e3d3d4a504fa6b643f68213770652fed533550b91fc90d3cb18150622158ee86fe5be231be
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.ebop.website
Port
587
Username
[email protected]
Password
P@ssw0rdP@ssw0rd

Targets

- Target
  693e675d00cbdc446dd08caa1a50d6fea6bef5c44e2e4ba0d45160f25daa0762
- Size 623KB
- SHA256 693e675d00cbdc446dd08caa1a50d6fea6bef5c44e2e4ba0d45160f25daa0762
- MD5 c5be5e8ff978dee30f7308fb873cceca
- SHA1 1350e3fd471dee343862c1846f1b47db88d15ccb
- SHA512 b93dc6fc97b406458831321a3f1882da04d47bfa66804256dbc348e3d3d4a504fa6b643f68213770652fed533550b91fc90d3cb18150622158ee86fe5be231be
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan