agenttesla | 55bb46bf486c75b1774c07b2d71a819131bcf3005e30a6f1817c3e24ed8e2589 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PAYMENT INVOICE-9876543456789.exe
Size 636KB
Sample210219-clht662m4n
SHA256 55bb46bf486c75b1774c07b2d71a819131bcf3005e30a6f1817c3e24ed8e2589
MD5 64232953bbcf599a77b499c72ceb43e6
SHA1 7738e3f1182e53ea5f5ed7a9644b0ca18632bb23
SHA512 287364d121bad5def72030ead760be83cdb1016943c609819ee3cb4bae0d8de9680dec70fb94c19e102bad1d8f579ef797101fa8756d3e98d68628b5dfddab06
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.shakurjay.com
Port
587
Username
[email protected]
Password
zpwXtxm7

Targets

- Target
  PAYMENT INVOICE-9876543456789.exe
- Size 636KB
- SHA256 55bb46bf486c75b1774c07b2d71a819131bcf3005e30a6f1817c3e24ed8e2589
- MD5 64232953bbcf599a77b499c72ceb43e6
- SHA1 7738e3f1182e53ea5f5ed7a9644b0ca18632bb23
- SHA512 287364d121bad5def72030ead760be83cdb1016943c609819ee3cb4bae0d8de9680dec70fb94c19e102bad1d8f579ef797101fa8756d3e98d68628b5dfddab06
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan