agenttesla | 72da1e5fdfc57c07501ab49085450aac225737f4eafd1a9a2a2d2ce46f615b19 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Pay Account Information Details.bat
Size 1.3MB
Sample210305-9f2qtkz3ys
SHA256 72da1e5fdfc57c07501ab49085450aac225737f4eafd1a9a2a2d2ce46f615b19
MD5 a8285a5a5b3b3cf0ddb2550e2e607a8d
SHA1 3e3adff631042a838d242c02e68b803e4a8ba145
SHA512 bb72bc0b75ada49e355135fb964311d098f6ad3210734a2774d15efd044b29faaa20693b5b95bbe2e0a8563dbd872cedd5bb1ef2502098aba04fde4166cab1b3
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
ftp
Host
ftp://ftp.basariotomotive.com/
Port
21
Username
[email protected]
Password
c)HjOf2p1YKm

Targets

- Target
  Pay Account Information Details.bat
- Size 1.3MB
- SHA256 72da1e5fdfc57c07501ab49085450aac225737f4eafd1a9a2a2d2ce46f615b19
- MD5 a8285a5a5b3b3cf0ddb2550e2e607a8d
- SHA1 3e3adff631042a838d242c02e68b803e4a8ba145
- SHA512 bb72bc0b75ada49e355135fb964311d098f6ad3210734a2774d15efd044b29faaa20693b5b95bbe2e0a8563dbd872cedd5bb1ef2502098aba04fde4166cab1b3
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan