Description
Agent Tesla is a remote access tool (RAT) written in visual basic.
30714756.exe
General
Target
Size
Sample
30714756.exe
617KB
210113-e4w9wkgqda
Score
10 /10
MD5
SHA1
SHA256
SHA512
c1279eb7ba4c37f73765233d8ce917d5
2e9978ed7bd20a8b8890f9d236317f0e6dfab11f
1d12e0ea21ddb6f39d309e836c5f8e2c3fcfd4c167b20185ca3723233230bb8b
5be8c1dac94b8c7f8cd183f57c82b66149fbe3a06d75745f9ccc5de77233ff45c363fbd7520f726c688e477e08f418271fb3e9e3039ff6b9ced1ec7b863646d6
Malware Config
Targets
Target
MD5
Filesize
30714756.exe
c1279eb7ba4c37f73765233d8ce917d5
617KB
Score
10 /10
SHA1
SHA256
SHA512
2e9978ed7bd20a8b8890f9d236317f0e6dfab11f
1d12e0ea21ddb6f39d309e836c5f8e2c3fcfd4c167b20185ca3723233230bb8b
5be8c1dac94b8c7f8cd183f57c82b66149fbe3a06d75745f9ccc5de77233ff45c363fbd7520f726c688e477e08f418271fb3e9e3039ff6b9ced1ec7b863646d6
Tags
Signatures
-
AgentTesla
-
Suspicious use of SetThreadContext
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks