agenttesla | 29ea2eab384e58eb174a1a628b6f66b96bf7c40b5f8213169dcdd8b9703def18 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
4eb249b8415632ce0f140e470425f031.exe
Size 1.2MB
Sample210305-ph3e6d6qe6
SHA256 29ea2eab384e58eb174a1a628b6f66b96bf7c40b5f8213169dcdd8b9703def18
MD5 4eb249b8415632ce0f140e470425f031
SHA1 ed6b940cad02498e2d09978b3aec228772774886
SHA512 cdfb46e76345ac8147a76f5b33a44c24143eddf59b4a7823c631a666a964917c0dd4d5ccf223d6768fcfa5c1da8bf5a93ec224b69fda6d20355be621dc2589ec
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.privateemail.com
Port
587
Username
[email protected]
Password
lord@blessme

Targets

- Target
  4eb249b8415632ce0f140e470425f031.exe
- Size 1.2MB
- SHA256 29ea2eab384e58eb174a1a628b6f66b96bf7c40b5f8213169dcdd8b9703def18
- MD5 4eb249b8415632ce0f140e470425f031
- SHA1 ed6b940cad02498e2d09978b3aec228772774886
- SHA512 cdfb46e76345ac8147a76f5b33a44c24143eddf59b4a7823c631a666a964917c0dd4d5ccf223d6768fcfa5c1da8bf5a93ec224b69fda6d20355be621dc2589ec
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan