agenttesla | 9733220cd3a69b55438876d8fb6477f2ebec950de8151f4732d415468e58535d | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Commercial Invoice, Packing List & Draft Bill Of Lading.exe
Size 1016KB
Sample210325-4ztm1hpc4j
SHA256 9733220cd3a69b55438876d8fb6477f2ebec950de8151f4732d415468e58535d
MD5 9fe3004f01791cc17cf99d838ae8e1d1
SHA1 3def5fda219a9f499fbdc8dc3931a59848cbd1c2
SHA512 5b72ceaca5cb6f90417e69bf2e643893199b7fa2dfd028ddce3cafb0f7a8bae77c360a092dfd9410bcb0cecb489756c954187b00d191f1409196e320e1d5c5c3
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.shyamindofab.com
Port
587
Username
[email protected]
Password
anurag#$486

Targets

- Target
  Commercial Invoice, Packing List & Draft Bill Of Lading.exe
- Size 1016KB
- SHA256 9733220cd3a69b55438876d8fb6477f2ebec950de8151f4732d415468e58535d
- MD5 9fe3004f01791cc17cf99d838ae8e1d1
- SHA1 3def5fda219a9f499fbdc8dc3931a59848cbd1c2
- SHA512 5b72ceaca5cb6f90417e69bf2e643893199b7fa2dfd028ddce3cafb0f7a8bae77c360a092dfd9410bcb0cecb489756c954187b00d191f1409196e320e1d5c5c3
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan