agenttesla | 7c2d1b8c5d5d073e7a04cdac3fa97b1761fa1b3ad6225fda7490b8273a57c985 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
2a2790604ae0958c5652bb32d01c0219.exe
Size 953KB
Sample210318-e2x5qkzfjn
SHA256 7c2d1b8c5d5d073e7a04cdac3fa97b1761fa1b3ad6225fda7490b8273a57c985
MD5 2a2790604ae0958c5652bb32d01c0219
SHA1 77f7b495bed18e78f36c1a17073e47522aab2fe8
SHA512 35c54a53c2e14b3d37d04539b35d3f656b490a2e26a850624e340d809c41cbae3b8e621dd2285447161eda995fb4c3847628bac35fedc82c8dede96f3851a2b2
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.industrialpack.eu
Port
587
Username
[email protected]
Password
maggie221869

Targets

- Target
  2a2790604ae0958c5652bb32d01c0219.exe
- Size 953KB
- SHA256 7c2d1b8c5d5d073e7a04cdac3fa97b1761fa1b3ad6225fda7490b8273a57c985
- MD5 2a2790604ae0958c5652bb32d01c0219
- SHA1 77f7b495bed18e78f36c1a17073e47522aab2fe8
- SHA512 35c54a53c2e14b3d37d04539b35d3f656b490a2e26a850624e340d809c41cbae3b8e621dd2285447161eda995fb4c3847628bac35fedc82c8dede96f3851a2b2
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan