agenttesla | 61ee96373bea7a259e498df91ca0ac4be13c0b130d85ea5efab91846c5cc9b79 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
QUOTE B1020363.pdf.exe
Size 685KB
Sample210208-v65bmj28mn
SHA256 61ee96373bea7a259e498df91ca0ac4be13c0b130d85ea5efab91846c5cc9b79
MD5 ba738bf53c8d63877b5a940300ba843c
SHA1 65db72c0faf2bb0d6c01a40281a3094b796c69ec
SHA512 55db7a2d9d489ff7d49ca54d80384c9fdcf15b2e8b0c38dc39b1fb8b64625448f2563f26c982850d4155dc9f1562c9b1ee7e62d5f1a06d08bad2dc7d91645124
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.vivaldi.net
Port
587
Username
[email protected]
Password
H(FPf]j;OgNA

Targets

- Target
  QUOTE B1020363.pdf.exe
- Size 685KB
- SHA256 61ee96373bea7a259e498df91ca0ac4be13c0b130d85ea5efab91846c5cc9b79
- MD5 ba738bf53c8d63877b5a940300ba843c
- SHA1 65db72c0faf2bb0d6c01a40281a3094b796c69ec
- SHA512 55db7a2d9d489ff7d49ca54d80384c9fdcf15b2e8b0c38dc39b1fb8b64625448f2563f26c982850d4155dc9f1562c9b1ee7e62d5f1a06d08bad2dc7d91645124
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan