agenttesla | a66877e631e722669c764b871db7dd41b2eceb6a6a76d22680ebb685bd4332c4 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
DHL Delivery Document.exe
Size 975KB
Sample210416-ejhbf624be
SHA256 a66877e631e722669c764b871db7dd41b2eceb6a6a76d22680ebb685bd4332c4
MD5 4a018b91b83aa7cedf4585383e77ef42
SHA1 0b73a1609c7c31f2fd6e180fcbbcae54a2058602
SHA512 e6521a423d281078361d63f6ba18722395624ac350a1186eb7e82a80f78a170cfd9081ab828ff6820410209a6fac4c9b42489dfe5313dff58154ce9acd662f71
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
kerekesfoto.com
Port
587
Username
[email protected]
Password
beDdUo*OeKkf

Targets

- Target
  DHL Delivery Document.exe
- Size 975KB
- SHA256 a66877e631e722669c764b871db7dd41b2eceb6a6a76d22680ebb685bd4332c4
- MD5 4a018b91b83aa7cedf4585383e77ef42
- SHA1 0b73a1609c7c31f2fd6e180fcbbcae54a2058602
- SHA512 e6521a423d281078361d63f6ba18722395624ac350a1186eb7e82a80f78a170cfd9081ab828ff6820410209a6fac4c9b42489dfe5313dff58154ce9acd662f71
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan