agenttesla | 3c46219c984f0cd6574b7b1ebb98283efec4c6acfd32cbca6a633e3fe8aa3613 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
RFQ #06830194.exe
Size 1010KB
Sample210416-cbljtypchx
SHA256 3c46219c984f0cd6574b7b1ebb98283efec4c6acfd32cbca6a633e3fe8aa3613
MD5 d1a81fb7b108a1a38fbc0832197825b8
SHA1 e08d70ad98f4097a998d10eded5ea84fddf303eb
SHA512 7137e580b4ea2649de5ffdc5f264128f296e9531fae7eeb446480032010411e79272794b66ff3062b94342606d31c4f55006e8bd5014b2b82176cfc161e3d685
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.bsdrre.com
Port
587
Username
[email protected]
Password
mallah0$

Targets

- Target
  RFQ #06830194.exe
- Size 1010KB
- SHA256 3c46219c984f0cd6574b7b1ebb98283efec4c6acfd32cbca6a633e3fe8aa3613
- MD5 d1a81fb7b108a1a38fbc0832197825b8
- SHA1 e08d70ad98f4097a998d10eded5ea84fddf303eb
- SHA512 7137e580b4ea2649de5ffdc5f264128f296e9531fae7eeb446480032010411e79272794b66ff3062b94342606d31c4f55006e8bd5014b2b82176cfc161e3d685
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan