agenttesla | 9e1d86ac14cc1d65212852b44b4aafcf79fda770ccf33f7bcc53eb382c74c381 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Order-027165.exe
Size 826KB
Sample210407-586c6v1q76
SHA256 9e1d86ac14cc1d65212852b44b4aafcf79fda770ccf33f7bcc53eb382c74c381
MD5 a21c206925ac88b1a203bcccecb8c651
SHA1 0fdf7049061a45b302ccbb072b136b08b2f5550a
SHA512 b7e813a199882de8c14be239beaa3eaed0dc373926ca1737e25366c6e1f100c396a9dfd4ee1c7efb929d6a30ae2c2ffc28282e68a1d709b529820e8e0f6f089a
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
webmail.eczanaerya.com
Port
587
Username
[email protected]
Password
Flo23@ret123

Targets

- Target
  Order-027165.exe
- Size 826KB
- SHA256 9e1d86ac14cc1d65212852b44b4aafcf79fda770ccf33f7bcc53eb382c74c381
- MD5 a21c206925ac88b1a203bcccecb8c651
- SHA1 0fdf7049061a45b302ccbb072b136b08b2f5550a
- SHA512 b7e813a199882de8c14be239beaa3eaed0dc373926ca1737e25366c6e1f100c396a9dfd4ee1c7efb929d6a30ae2c2ffc28282e68a1d709b529820e8e0f6f089a
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan