agenttesla | 7520c3d86fbc4b2313e8f2c0118a67e2102db4263b56ea7500dbd045d70c3914 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
4cbd50e71f77d7b9068a6d1ab77974f6.exe
Size 912KB
Sample210420-csj3pt65le
SHA256 7520c3d86fbc4b2313e8f2c0118a67e2102db4263b56ea7500dbd045d70c3914
MD5 4cbd50e71f77d7b9068a6d1ab77974f6
SHA1 2fe07559ccdc7d5ba1a92b5a2df07c9eed5998e4
SHA512 4617628e84d533847e99ff90cca7d11fbffe45b010c9362bfb7c5a83716ca083d5913f6671d7f2fcc3aa85fee3c3e58d1f4a88954f33c9aefe79f84a9b6c8c03
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1620445910:AAF2v81NoINJsu_XXnpGet1YDm-NxnznaIE/sendDocument

Targets

- Target
  4cbd50e71f77d7b9068a6d1ab77974f6.exe
- Size 912KB
- SHA256 7520c3d86fbc4b2313e8f2c0118a67e2102db4263b56ea7500dbd045d70c3914
- MD5 4cbd50e71f77d7b9068a6d1ab77974f6
- SHA1 2fe07559ccdc7d5ba1a92b5a2df07c9eed5998e4
- SHA512 4617628e84d533847e99ff90cca7d11fbffe45b010c9362bfb7c5a83716ca083d5913f6671d7f2fcc3aa85fee3c3e58d1f4a88954f33c9aefe79f84a9b6c8c03
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan