agenttesla | 8106862163f9c1fd1a8299024cdde38495aaa2b83ca229716ee8ad0bdb3e404b | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Shipping Documents.exe
Size 1.7MB
Sample210409-jkz23zy2mx
SHA256 8106862163f9c1fd1a8299024cdde38495aaa2b83ca229716ee8ad0bdb3e404b
MD5 e8c0438d74e9f702e61715f9727a8314
SHA1 ee3e3fa3983eeccad928b491f73ec7f36c48fc13
SHA512 d6a7f45b8ede9801b36f9fbefb82e7909f360a0f281f24355dc09c3c92e5a5b193c87fa01010e71d95391461a01950f9f9cbd26b07ab1043ce2587116b1dc31d
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
kerekesfoto.com
Port
587
Username
[email protected]
Password
ZjsX$@goNJEX

Targets

- Target
  Shipping Documents.exe
- Size 1.7MB
- SHA256 8106862163f9c1fd1a8299024cdde38495aaa2b83ca229716ee8ad0bdb3e404b
- MD5 e8c0438d74e9f702e61715f9727a8314
- SHA1 ee3e3fa3983eeccad928b491f73ec7f36c48fc13
- SHA512 d6a7f45b8ede9801b36f9fbefb82e7909f360a0f281f24355dc09c3c92e5a5b193c87fa01010e71d95391461a01950f9f9cbd26b07ab1043ce2587116b1dc31d
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan