agenttesla | 5a0aa498e1f4e70b6447e6183926f91e39f162cb15f8bc97232ca5cd0ce5a625 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
AWB & Shipping Doc.exe
Size 931KB
Sample210222-tjdbsx7hvx
SHA256 5a0aa498e1f4e70b6447e6183926f91e39f162cb15f8bc97232ca5cd0ce5a625
MD5 536b2bb54a18c527b284f1d2d7e98468
SHA1 a448538edc7527f2ddb557f0dc5db44cde263c0c
SHA512 1a613f1873533512fc6094e3e31ede7f22c62a5e8c7226cbef719606fb164fb4f4af2bbede6ddf9dbc0fc742067a9e154b0523b19123801e79e488e88c92d182
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.valvesonlyevrope.com
Port
587
Username
[email protected]
Password
)HwIwnE3

Targets

- Target
  AWB & Shipping Doc.exe
- Size 931KB
- SHA256 5a0aa498e1f4e70b6447e6183926f91e39f162cb15f8bc97232ca5cd0ce5a625
- MD5 536b2bb54a18c527b284f1d2d7e98468
- SHA1 a448538edc7527f2ddb557f0dc5db44cde263c0c
- SHA512 1a613f1873533512fc6094e3e31ede7f22c62a5e8c7226cbef719606fb164fb4f4af2bbede6ddf9dbc0fc742067a9e154b0523b19123801e79e488e88c92d182
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan