agenttesla | 83bf33f59a2317bc1dd4457798cae79e2d607d511cf12c3c0cff36886fe20d19 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.PackedNET.580.26613.13299
Size 876KB
Sample210318-6f5echh21j
SHA256 83bf33f59a2317bc1dd4457798cae79e2d607d511cf12c3c0cff36886fe20d19
MD5 c47b1974b73196909a2e1647b2c73000
SHA1 23dd5387523dddb7a7801eb4fbb5b2e0fe58eb85
SHA512 0f9c3ffdedc78515a72c7800215921f55d2dd9a5ad15a236c16b6bd38095acbf7808a6003e6d6043de315c508c23b0bfc8b5b77451c682a50f362d6ec2ef3fa2
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.elnasrcastings.com
Port
587
Username
[email protected]
Password
hello2012

Targets

- Target
  SecuriteInfo.com.Trojan.PackedNET.580.26613.13299
- Size 876KB
- SHA256 83bf33f59a2317bc1dd4457798cae79e2d607d511cf12c3c0cff36886fe20d19
- MD5 c47b1974b73196909a2e1647b2c73000
- SHA1 23dd5387523dddb7a7801eb4fbb5b2e0fe58eb85
- SHA512 0f9c3ffdedc78515a72c7800215921f55d2dd9a5ad15a236c16b6bd38095acbf7808a6003e6d6043de315c508c23b0bfc8b5b77451c682a50f362d6ec2ef3fa2
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan