agenttesla | 2afcf205a46aeede621ddf890002c4eed4e9b5044881d625d1f2daa443bc1328 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Transfer Copy 15536usd.exe
Size 1.1MB
Sample210326-26cclkys4x
SHA256 2afcf205a46aeede621ddf890002c4eed4e9b5044881d625d1f2daa443bc1328
MD5 cce110f84a1f04ea636a22e33e2df99b
SHA1 73da58ef3a3ec4173e88b71c04cd47a28782449d
SHA512 d057bb3568149cf232e8c1b0e280a27daf2ba75f95d7c705057acbd5208465ad8afbe6faba9e074f99d8658d5aed200212e7344b6e63a977cb901fa9f665d291
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.moqas.com
Port
587
Username
[email protected]
Password
ANbggoR0

Targets

- Target
  Transfer Copy 15536usd.exe
- Size 1.1MB
- SHA256 2afcf205a46aeede621ddf890002c4eed4e9b5044881d625d1f2daa443bc1328
- MD5 cce110f84a1f04ea636a22e33e2df99b
- SHA1 73da58ef3a3ec4173e88b71c04cd47a28782449d
- SHA512 d057bb3568149cf232e8c1b0e280a27daf2ba75f95d7c705057acbd5208465ad8afbe6faba9e074f99d8658d5aed200212e7344b6e63a977cb901fa9f665d291
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan