agenttesla | 5b8e5eaab8f48bd7ac92bf7437383abc5182ec3667443de0aee1f5d2b8711750 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Price request.exe
Size 676KB
Sample210321-cbfk16n986
SHA256 5b8e5eaab8f48bd7ac92bf7437383abc5182ec3667443de0aee1f5d2b8711750
MD5 7d152dd920f4be1d573eac21a952863c
SHA1 a4f99f67ab55bb2676bc2df8a1c7c8e48c2f9e6d
SHA512 f0bf1bc5c038e165e61116b234ea882a57708bb65340f87cf199f6f4e7d9bdefca475b1ed0e1b4adc774c5a8da332e88d4a3453fb578b47d82fa201e03d29098
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.mail.com
Port
587
Username
[email protected]
Password
payment2018

Targets

- Target
  Price request.exe
- Size 676KB
- SHA256 5b8e5eaab8f48bd7ac92bf7437383abc5182ec3667443de0aee1f5d2b8711750
- MD5 7d152dd920f4be1d573eac21a952863c
- SHA1 a4f99f67ab55bb2676bc2df8a1c7c8e48c2f9e6d
- SHA512 f0bf1bc5c038e165e61116b234ea882a57708bb65340f87cf199f6f4e7d9bdefca475b1ed0e1b4adc774c5a8da332e88d4a3453fb578b47d82fa201e03d29098
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan