agenttesla | 9280d69cf9742c45fd029bba3fe70b154ecad92a31c5ccf30259e5802bb330a9 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
06201d2da6ff320d841584ea956d32d0.exe
Size 672KB
Sample210313-vx59wypd32
SHA256 9280d69cf9742c45fd029bba3fe70b154ecad92a31c5ccf30259e5802bb330a9
MD5 06201d2da6ff320d841584ea956d32d0
SHA1 9d1fd4a7b7baa6693cf3cecb54b7c7c7672b5a34
SHA512 2315110c0f348023fd9939afe972835bec360807560a811b6194e26bebfc78dcbb00a25c96c52722653479d694c0e0ad508c58fa544a2fc52ff4974171c80d53
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
W(%RQ@J7

Targets

- Target
  06201d2da6ff320d841584ea956d32d0.exe
- Size 672KB
- SHA256 9280d69cf9742c45fd029bba3fe70b154ecad92a31c5ccf30259e5802bb330a9
- MD5 06201d2da6ff320d841584ea956d32d0
- SHA1 9d1fd4a7b7baa6693cf3cecb54b7c7c7672b5a34
- SHA512 2315110c0f348023fd9939afe972835bec360807560a811b6194e26bebfc78dcbb00a25c96c52722653479d694c0e0ad508c58fa544a2fc52ff4974171c80d53
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan