agenttesla | 5f4e2a1354cd895b7deccd1e0e702bff02eee8aee5a388f98526b6e203ea131b | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Shipping Invoice.exe
Size 853KB
Sample210423-az4v56tpf6
SHA256 5f4e2a1354cd895b7deccd1e0e702bff02eee8aee5a388f98526b6e203ea131b
MD5 2a6aa0a5026ba0cb75c6a6c475b58da4
SHA1 01f3140e506a6b11bf9bd52bd3c49a8883d60690
SHA512 e1a6530ddc0b8bb436d0104dc0b6c08f58ac20d1fa6029e1c2fcca5ed1fbfc34a49368412a609237f6180f2f4edd404d91b482d70cef3c71d321fb5601de3988
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.lokalboyz.com
Port
587
Username
[email protected]
Password
lkEb6ovn

Targets

- Target
  Shipping Invoice.exe
- Size 853KB
- SHA256 5f4e2a1354cd895b7deccd1e0e702bff02eee8aee5a388f98526b6e203ea131b
- MD5 2a6aa0a5026ba0cb75c6a6c475b58da4
- SHA1 01f3140e506a6b11bf9bd52bd3c49a8883d60690
- SHA512 e1a6530ddc0b8bb436d0104dc0b6c08f58ac20d1fa6029e1c2fcca5ed1fbfc34a49368412a609237f6180f2f4edd404d91b482d70cef3c71d321fb5601de3988
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan