agenttesla | 0565a0ae6dc721022cfcc38217470d5482e019e530631a249b59052d54db25bb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Zahlung.exe
Size 604KB
Sample201119-ctxbdebwxa
SHA256 0565a0ae6dc721022cfcc38217470d5482e019e530631a249b59052d54db25bb
MD5 c0c87b17394fa26a71226ad6e91990e6
SHA1 53afca4078c7cd71a4bd7e5ffaab5d54d5470670
SHA512 43dc597a0f7750185eada79d2f76b300f9ceac7a6180d301e505a57b8168334f6281c03c61d344e0ba11fee9d99a55e4dc4afba5243f67ca1d182786261be198
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.greatdeck.co
Port
587
Username
[email protected]
Password
Greatd@2018$!

Targets

- Target
  Zahlung.exe
- Size 604KB
- SHA256 0565a0ae6dc721022cfcc38217470d5482e019e530631a249b59052d54db25bb
- MD5 c0c87b17394fa26a71226ad6e91990e6
- SHA1 53afca4078c7cd71a4bd7e5ffaab5d54d5470670
- SHA512 43dc597a0f7750185eada79d2f76b300f9ceac7a6180d301e505a57b8168334f6281c03c61d344e0ba11fee9d99a55e4dc4afba5243f67ca1d182786261be198
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan