agenttesla | 27bfd9afe378e51fd22cf91cb2fa77cef33bf303f35db5f41c35dd12e650b233 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
8b29029bac808942d9576595450b4ebb.exe
Size 641KB
Sample210401-dsd5kk8kds
SHA256 27bfd9afe378e51fd22cf91cb2fa77cef33bf303f35db5f41c35dd12e650b233
MD5 8b29029bac808942d9576595450b4ebb
SHA1 a7914ea708edac2248d8adc3f39c9580c52c1c88
SHA512 a1a23c25db4ebd96f719d67063b07c00001293f651cdc7783dbfeecf453c6215444329e7a441362d92f2850e9d8336ad22cf473cb87b8086e05dda252632e3b6
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.privateemail.com
Port
587
Username
[email protected]
Password
Thegodfather12345

Targets

- Target
  8b29029bac808942d9576595450b4ebb.exe
- Size 641KB
- SHA256 27bfd9afe378e51fd22cf91cb2fa77cef33bf303f35db5f41c35dd12e650b233
- MD5 8b29029bac808942d9576595450b4ebb
- SHA1 a7914ea708edac2248d8adc3f39c9580c52c1c88
- SHA512 a1a23c25db4ebd96f719d67063b07c00001293f651cdc7783dbfeecf453c6215444329e7a441362d92f2850e9d8336ad22cf473cb87b8086e05dda252632e3b6
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan