agenttesla | 24178fa3969b7256e53f2f77cc080cf5819fc303bbfa0f51ac97e7734beb5212 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Shipping Documents.exe
Size 798KB
Sample210413-2lxvchh7fa
SHA256 24178fa3969b7256e53f2f77cc080cf5819fc303bbfa0f51ac97e7734beb5212
MD5 48ba862fb2fe5608269fa9e510d285cb
SHA1 018ba770ed5e10039266079bc470ea97257dbfb8
SHA512 39acd4c0cb908a925cff90ebe35e2574fe686af3846ba7bccbe0f1365adb25744bc47944d832d360a4406fffa8ffed8b10e9993b4c403f0c23fb8d2d93103684
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
kerekesfoto.com
Port
587
Username
[email protected]
Password
ZjsX$@goNJEX

Targets

- Target
  Shipping Documents.exe
- Size 798KB
- SHA256 24178fa3969b7256e53f2f77cc080cf5819fc303bbfa0f51ac97e7734beb5212
- MD5 48ba862fb2fe5608269fa9e510d285cb
- SHA1 018ba770ed5e10039266079bc470ea97257dbfb8
- SHA512 39acd4c0cb908a925cff90ebe35e2574fe686af3846ba7bccbe0f1365adb25744bc47944d832d360a4406fffa8ffed8b10e9993b4c403f0c23fb8d2d93103684
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan