agenttesla | ff7cfa32cedd5fa246f999297b1330baaf922d5cd878883438a7e5e65d054362 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
IMG_00000000001.PDF.exe
Size 1.0MB
Sample210407-fe1egg41j2
SHA256 ff7cfa32cedd5fa246f999297b1330baaf922d5cd878883438a7e5e65d054362
MD5 96b5b7152b1bf3ecc7425d15d41e7152
SHA1 7bce020f5a3a1f907daf0ba4d57e3f563c3374e7
SHA512 7421e08b83117ad8f7e4e4fae6d94965e2ae14fc1e28dd6eb5f86af5e7ecfd67d3e526a7ca6062b00325965e5d4c47f6e2315c11fedf31d4fb31903842e24b59
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
YnFX@HO9

Targets

- Target
  IMG_00000000001.PDF.exe
- Size 1.0MB
- SHA256 ff7cfa32cedd5fa246f999297b1330baaf922d5cd878883438a7e5e65d054362
- MD5 96b5b7152b1bf3ecc7425d15d41e7152
- SHA1 7bce020f5a3a1f907daf0ba4d57e3f563c3374e7
- SHA512 7421e08b83117ad8f7e4e4fae6d94965e2ae14fc1e28dd6eb5f86af5e7ecfd67d3e526a7ca6062b00325965e5d4c47f6e2315c11fedf31d4fb31903842e24b59
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan