agenttesla | 6ea1db252f87c50be810c36e4bd97c56e15a1aa8744de8855591ccaf48afa72f | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ed2074f92b6b66a0679cb47d94308c16.exe
Size 1.0MB
Sample210422-d2hmxer7y6
SHA256 6ea1db252f87c50be810c36e4bd97c56e15a1aa8744de8855591ccaf48afa72f
MD5 ed2074f92b6b66a0679cb47d94308c16
SHA1 5b50ce89380b618206e3bd4fc6ea96924657c3f8
SHA512 2baa261d8a435169a87cd5084fd588bbb5c484b88de3a5c36cc6fa8ffeaff1d881051ac28f34051f6a00da32f7a892b414fc3130f92906dcf54c8ede364ffcdb
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1620445910:AAF2v81NoINJsu_XXnpGet1YDm-NxnznaIE/sendDocument

Targets

- Target
  ed2074f92b6b66a0679cb47d94308c16.exe
- Size 1.0MB
- SHA256 6ea1db252f87c50be810c36e4bd97c56e15a1aa8744de8855591ccaf48afa72f
- MD5 ed2074f92b6b66a0679cb47d94308c16
- SHA1 5b50ce89380b618206e3bd4fc6ea96924657c3f8
- SHA512 2baa261d8a435169a87cd5084fd588bbb5c484b88de3a5c36cc6fa8ffeaff1d881051ac28f34051f6a00da32f7a892b414fc3130f92906dcf54c8ede364ffcdb
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan