agenttesla | 586db0690d1fe17d41a23d8d06ad77bc62a01774b1792ea654c9fdcbe3bdbd1d | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
61112d94cef0ba979abbb5a670279b80.exe
Size 580KB
Sample210331-stxr72lrt2
SHA256 586db0690d1fe17d41a23d8d06ad77bc62a01774b1792ea654c9fdcbe3bdbd1d
MD5 61112d94cef0ba979abbb5a670279b80
SHA1 a851759d44439fb99f73b31ac63d4f610c8b5ebb
SHA512 2160a20c72fb04fca95883fae30116f0b0ccbf4779607cdffa05b9145d2b6102f143f12b6b10196488d06473c2d0d658635122eacc8afbde703b1390084a7be2
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.privateemail.com
Port
587
Username
[email protected]
Password
Thegodfather12345

Targets

- Target
  61112d94cef0ba979abbb5a670279b80.exe
- Size 580KB
- SHA256 586db0690d1fe17d41a23d8d06ad77bc62a01774b1792ea654c9fdcbe3bdbd1d
- MD5 61112d94cef0ba979abbb5a670279b80
- SHA1 a851759d44439fb99f73b31ac63d4f610c8b5ebb
- SHA512 2160a20c72fb04fca95883fae30116f0b0ccbf4779607cdffa05b9145d2b6102f143f12b6b10196488d06473c2d0d658635122eacc8afbde703b1390084a7be2
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan