agenttesla | 4a3f756ee91cc744cc968f8403aceb899834fe241dc7f274d3870262b513dbb9 | Triage

Submit
Reports

Overview

overview

Static

static

MDS5932RFQ.exe

windows7_x64

7

MDS5932RFQ.exe

windows10_x64

Sharing

General

Target

MDS5932RFQ.exe
Size

1.7MB
Sample

210119-c9ph11b37s
MD5

fbf64913f493897b86b2dd9986dc91b1
SHA1

e6b15e75ca2670e924b2807a71a3ac2c3a5765eb
SHA256

4a3f756ee91cc744cc968f8403aceb899834fe241dc7f274d3870262b513dbb9
SHA512

6527bf9e08b883d28719677f9b95e95ef838d28db324a4629454c5473641582310e18f630a7acfc1cf86977060af68739194f31c133377a10df25759a786e146

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

MDS5932RFQ.exe

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

MDS5932RFQ.exe

Resource

win10v20201028

agenttesla keylogger spyware stealer trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  MDS5932RFQ.exe
- Size
  
  1.7MB
- MD5
  
  fbf64913f493897b86b2dd9986dc91b1
- SHA1
  
  e6b15e75ca2670e924b2807a71a3ac2c3a5765eb
- SHA256
  
  4a3f756ee91cc744cc968f8403aceb899834fe241dc7f274d3870262b513dbb9
- SHA512
  
  6527bf9e08b883d28719677f9b95e95ef838d28db324a4629454c5473641582310e18f630a7acfc1cf86977060af68739194f31c133377a10df25759a786e146
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Drops startup file
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy