agenttesla | fc9727f2753b43b61dfd651efaf5adb6e43edd12564b54acf16c23756091b5f7 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
6c4d7f39e594a4a0a11a7d8b9372c55d.exe
Size 798KB
Sample210327-vm6633v5a6
SHA256 fc9727f2753b43b61dfd651efaf5adb6e43edd12564b54acf16c23756091b5f7
MD5 6c4d7f39e594a4a0a11a7d8b9372c55d
SHA1 13de8daac1fdb154052e08160bd266c3991e700a
SHA512 aec5ed8e4de958be290b526176841f93de1950f24dc9df15f1caa72f23f2547ca7d30ca56e02459006813ca68fbd3605b9527397bbf3ab46599785586f029e4d
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.lps.property
Port
587
Username
[email protected]
Password
r1jDC2BLR@@@@@@@@@@@@@@@

Targets

- Target
  6c4d7f39e594a4a0a11a7d8b9372c55d.exe
- Size 798KB
- SHA256 fc9727f2753b43b61dfd651efaf5adb6e43edd12564b54acf16c23756091b5f7
- MD5 6c4d7f39e594a4a0a11a7d8b9372c55d
- SHA1 13de8daac1fdb154052e08160bd266c3991e700a
- SHA512 aec5ed8e4de958be290b526176841f93de1950f24dc9df15f1caa72f23f2547ca7d30ca56e02459006813ca68fbd3605b9527397bbf3ab46599785586f029e4d
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan