Description
Agent Tesla is a remote access tool (RAT) written in visual basic.
Purchase Order_Pdf.exe
General
Target
Size
Sample
Purchase Order_Pdf.exe
1MB
210113-tqxqw1jf2e
Score
10 /10
MD5
SHA1
SHA256
SHA512
24ab440ba14af239092dc2f4c04a4aed
4f060fb538c3f5fba0b7e8e95bfc5c3f620ea190
c213685d3005fbac05b0cd6b11a077f57cc4d50fcb762c7cab8a81ae7dec2043
2d3ba4ced486d9de70598f9934e20951fe7e4e056d8f50a9ed4c6f947e169885efe9f7c9b24d2dcff345ba0b7b33ca47ee11defdade776dd22514aba22d8a10b
Malware Config
Targets
Target
MD5
Filesize
Purchase Order_Pdf.exe
24ab440ba14af239092dc2f4c04a4aed
1MB
Score
10 /10
SHA1
SHA256
SHA512
4f060fb538c3f5fba0b7e8e95bfc5c3f620ea190
c213685d3005fbac05b0cd6b11a077f57cc4d50fcb762c7cab8a81ae7dec2043
2d3ba4ced486d9de70598f9934e20951fe7e4e056d8f50a9ed4c6f947e169885efe9f7c9b24d2dcff345ba0b7b33ca47ee11defdade776dd22514aba22d8a10b
Tags
Signatures
-
AgentTesla
-
Reads data files stored by FTP clients
Description
Tries to access configuration files associated with programs like FileZilla.
Tags
TTPs
-
Reads user/profile data of local email clients
Description
Email clients store some user data on disk where infostealers will often target it.
Tags
TTPs
-
Reads user/profile data of web browsers
Description
Infostealers often target stored browser data, which can include saved credentials etc.
Tags
TTPs
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks