Description
Agent Tesla is a remote access tool (RAT) written in visual basic.
SC_UNMSM 06042021.exe
General
Target
Size
Sample
SC_UNMSM 06042021.exe
746KB
210408-k356mlmt32
Score
10 /10
MD5
SHA1
SHA256
SHA512
d861e9c1a56f528517dd530d4e7f001c
ae07d2ec36e18775bc8c6347c73a3057d7ea7991
9f6ac087249c3b9b13c176d96113a3123d6986b536aac8573c89cd478770ecc5
ca279e8b178520a42cc9983f7db0e65162ac0acd69276f45663e32ae96b9426cc262073eee8adeffffd765ab3baf864893c5f07d4accf22015ed824f7396ecd4
Malware Config
Extracted
| Family | agenttesla |
| Credentials |
Protocol: smtp Host: mail.chrismehat.com Port: 587 Username: market@chrismehat.com Password: vStcCO~Cyox6 |
Targets
Target
MD5
Filesize
SC_UNMSM 06042021.exe
d861e9c1a56f528517dd530d4e7f001c
746KB
Score
10 /10
SHA1
SHA256
SHA512
ae07d2ec36e18775bc8c6347c73a3057d7ea7991
9f6ac087249c3b9b13c176d96113a3123d6986b536aac8573c89cd478770ecc5
ca279e8b178520a42cc9983f7db0e65162ac0acd69276f45663e32ae96b9426cc262073eee8adeffffd765ab3baf864893c5f07d4accf22015ed824f7396ecd4
Tags
Signatures
-
AgentTesla
-
AgentTesla Payload
-
Suspicious use of SetThreadContext
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks