agenttesla | a8c94f8fc9b5c2a0cd3da68122fc36b28a7b990ace2f238961742245ece50ed5 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
7Cq33XUYM9Uqr2G.exe
Size 785KB
Sample210301-j3rwh2dbns
SHA256 a8c94f8fc9b5c2a0cd3da68122fc36b28a7b990ace2f238961742245ece50ed5
MD5 df02104794c1462ec0cc8801638d8454
SHA1 1f8f74021be336fb06e771f9a441e0e95078593a
SHA512 973ddbaad0b7a24f13a67c51c87daacd219743731f901372eadb335ef91cb01e414c0965653b52cc96655c45c1e687056068f4c65a62ca6901d978b141e2493d
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.biofactlife.com
Port
587
Username
[email protected]
Password
timo5094

Targets

- Target
  7Cq33XUYM9Uqr2G.exe
- Size 785KB
- SHA256 a8c94f8fc9b5c2a0cd3da68122fc36b28a7b990ace2f238961742245ece50ed5
- MD5 df02104794c1462ec0cc8801638d8454
- SHA1 1f8f74021be336fb06e771f9a441e0e95078593a
- SHA512 973ddbaad0b7a24f13a67c51c87daacd219743731f901372eadb335ef91cb01e414c0965653b52cc96655c45c1e687056068f4c65a62ca6901d978b141e2493d
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan