agenttesla | b2ccefc9809053d0d590ad346ee8a3fc38ff405eefb28b9e4d8fb287bee761a8 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
TRANSACTION_INTTRANSFER_1617266945242 MEDICON_PDF.exe
Size 1011KB
Sample210405-914s9c3mqs
SHA256 b2ccefc9809053d0d590ad346ee8a3fc38ff405eefb28b9e4d8fb287bee761a8
MD5 5c1904a28fb3944c74793d5ddee36a42
SHA1 8d8ded975927b9d2b4dfdcdab7b5277d8bf13ed3
SHA512 c530fc392f5a94b8b5e3bd7240c8fed5ed206d2b3ef442139c8706a89b557fa098239c09cdc7f8d9b699eb9ad6aef17cf2cd6609558e5bd54d74edadf34d87cf
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
Fikriye1234

Targets

- Target
  TRANSACTION_INTTRANSFER_1617266945242 MEDICON_PDF.exe
- Size 1011KB
- SHA256 b2ccefc9809053d0d590ad346ee8a3fc38ff405eefb28b9e4d8fb287bee761a8
- MD5 5c1904a28fb3944c74793d5ddee36a42
- SHA1 8d8ded975927b9d2b4dfdcdab7b5277d8bf13ed3
- SHA512 c530fc392f5a94b8b5e3bd7240c8fed5ed206d2b3ef442139c8706a89b557fa098239c09cdc7f8d9b699eb9ad6aef17cf2cd6609558e5bd54d74edadf34d87cf
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan