agenttesla | 03675b36674123dd354677697244738fd9cabf2cf6314ab6e1bb2b4432aeccb2 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
85540c4576fb1d324b8ff46bc3ef5295.exe
Size 1.1MB
Sample210301-9dc459p2js
SHA256 03675b36674123dd354677697244738fd9cabf2cf6314ab6e1bb2b4432aeccb2
MD5 85540c4576fb1d324b8ff46bc3ef5295
SHA1 dcff9109ff4c1382931b66f5a541b32ec8a0f175
SHA512 58efd1079ab966a5bc885ca3572659821cc9eb497f2e4be78a49c017a9239b3e49e0a9e0e14efbeffd27ef969bef2db00c1b409e198b802a8c3da305a75e8822
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.privateemail.com
Port
587
Username
[email protected]
Password
lord@blessme

Targets

- Target
  85540c4576fb1d324b8ff46bc3ef5295.exe
- Size 1.1MB
- SHA256 03675b36674123dd354677697244738fd9cabf2cf6314ab6e1bb2b4432aeccb2
- MD5 85540c4576fb1d324b8ff46bc3ef5295
- SHA1 dcff9109ff4c1382931b66f5a541b32ec8a0f175
- SHA512 58efd1079ab966a5bc885ca3572659821cc9eb497f2e4be78a49c017a9239b3e49e0a9e0e14efbeffd27ef969bef2db00c1b409e198b802a8c3da305a75e8822
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan