agenttesla | 7707ba85b887aaf88da9b91fce5576f15b92c03bcfe253424313e4e1c93175e9 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
QUOTATION.exe
Size 798KB
Sample210331-xhl8ce2xa2
SHA256 7707ba85b887aaf88da9b91fce5576f15b92c03bcfe253424313e4e1c93175e9
MD5 a3ce33e669164ca64ff4e7f0795f5bfc
SHA1 9a59c9c956441b34a3daa4070f7f69d39fc9a065
SHA512 7e63ab98a50175e80914e4135d0b1cceed3c67056de1be59ad6979cf70132ea6c2a4172e8625e8ea3708b9f36061bd1384364bae7db005e12f1f9e3245140d6a
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.skintechpharmgroup.com
Port
587
Username
[email protected]
Password
RUT!ZR^9

Targets

- Target
  QUOTATION.exe
- Size 798KB
- SHA256 7707ba85b887aaf88da9b91fce5576f15b92c03bcfe253424313e4e1c93175e9
- MD5 a3ce33e669164ca64ff4e7f0795f5bfc
- SHA1 9a59c9c956441b34a3daa4070f7f69d39fc9a065
- SHA512 7e63ab98a50175e80914e4135d0b1cceed3c67056de1be59ad6979cf70132ea6c2a4172e8625e8ea3708b9f36061bd1384364bae7db005e12f1f9e3245140d6a
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan