agenttesla | 844512e57aa56c35f62172aeceff0c86b54d43091af5eadb2f37d5ab4f37661b | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
EZ0496 PAYMENT.exe
Size 820KB
Sample210416-rnwxlxank2
SHA256 844512e57aa56c35f62172aeceff0c86b54d43091af5eadb2f37d5ab4f37661b
MD5 60b96fab147d95dbea9292b70ffda547
SHA1 97d6ea5d57756d9792a83b3e9be3bcd4190813eb
SHA512 b7c4d22ab746c5ba1c12a86214ce05a62b166b814499df4135d30e8ab2b32d46915ec2db205d363b9f1179a1e72567449db1e15bd2ab27b9bd13dfd69d9b4960
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.richieslogs.com
Port
587
Username
[email protected]
Password
Chukwudim28@

Targets

- Target
  EZ0496 PAYMENT.exe
- Size 820KB
- SHA256 844512e57aa56c35f62172aeceff0c86b54d43091af5eadb2f37d5ab4f37661b
- MD5 60b96fab147d95dbea9292b70ffda547
- SHA1 97d6ea5d57756d9792a83b3e9be3bcd4190813eb
- SHA512 b7c4d22ab746c5ba1c12a86214ce05a62b166b814499df4135d30e8ab2b32d46915ec2db205d363b9f1179a1e72567449db1e15bd2ab27b9bd13dfd69d9b4960
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan