agenttesla | 9c0bc02f53fe2d0a3a347e2306a1ac7b4a5c80bb9332f0ae1734126e78df2596 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Delivery Note Awd - 3748489443-93878300273.exe
Size 534KB
Sample210226-37tkn2j696
SHA256 9c0bc02f53fe2d0a3a347e2306a1ac7b4a5c80bb9332f0ae1734126e78df2596
MD5 c09f8ef8861ed247635c25d80444cebe
SHA1 950bc20f2d52391849807e423c38f392fe609cd8
SHA512 6cbbe57113ce31ca131e84c3a1a3112f558e450af1bfbc2ccf5e32b4d6449f21f18c6e4dc4a44d2216717e8fe98a2ad9f738f6048ccc8efdc7a93d38513f8991
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
ftp
Host
ftp://ftp.curidesigner.com/
Port
21
Username
[email protected]
Password
boygirl123456

Targets

- Target
  Delivery Note Awd - 3748489443-93878300273.exe
- Size 534KB
- SHA256 9c0bc02f53fe2d0a3a347e2306a1ac7b4a5c80bb9332f0ae1734126e78df2596
- MD5 c09f8ef8861ed247635c25d80444cebe
- SHA1 950bc20f2d52391849807e423c38f392fe609cd8
- SHA512 6cbbe57113ce31ca131e84c3a1a3112f558e450af1bfbc2ccf5e32b4d6449f21f18c6e4dc4a44d2216717e8fe98a2ad9f738f6048ccc8efdc7a93d38513f8991
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan