agenttesla | 826d203e305f770a9c3b2b3ec8b024ceced15fbc2cf8c1bae72ffa86888edeef | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ef18ea0a1fee816a7bf12005cf7553c4.exe
Size 1.0MB
Sample210324-hmw5ymlpfa
SHA256 826d203e305f770a9c3b2b3ec8b024ceced15fbc2cf8c1bae72ffa86888edeef
MD5 ef18ea0a1fee816a7bf12005cf7553c4
SHA1 88b36b5ee3303fa97f3e5e96d20a489c3360da6f
SHA512 72dc7d35e5a18055625ea333fdc6277cb02bb2b376b10a5058e25cf454839db81631ced25d3fbf85d4b97a2de0d49f5c1cc9e53a40b739cbb283ddd718d1d033
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.oucabem.com.br
Port
587
Username
[email protected]
Password
r1jDC2BLR@@@@@@@@@

Targets

- Target
  ef18ea0a1fee816a7bf12005cf7553c4.exe
- Size 1.0MB
- SHA256 826d203e305f770a9c3b2b3ec8b024ceced15fbc2cf8c1bae72ffa86888edeef
- MD5 ef18ea0a1fee816a7bf12005cf7553c4
- SHA1 88b36b5ee3303fa97f3e5e96d20a489c3360da6f
- SHA512 72dc7d35e5a18055625ea333fdc6277cb02bb2b376b10a5058e25cf454839db81631ced25d3fbf85d4b97a2de0d49f5c1cc9e53a40b739cbb283ddd718d1d033
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan