agenttesla | afd6bafa6a8d82e932299d940a71eb03ce9c9f01e1818589500af3ea59c6cebc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
foakTEjUOvL9nBY.exe
Size 557KB
Sample210430-k7cf3eg2t2
SHA256 afd6bafa6a8d82e932299d940a71eb03ce9c9f01e1818589500af3ea59c6cebc
MD5 48528d26cfaed274c20c383a5f3ab9e5
SHA1 2afde314bd93498a0c7260912a7cf67312f49f4f
SHA512 a3ffa9da7f288a97e41397c3c1bc62fe3f85bd1465e45e6e187b9c5ae7be0991a27419bd1cce99a1b8fbf7526375b217ae7621affbf9b46897f30764995eb405
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.iykmoreentrprise.org
Port
587
Username
[email protected]
Password
rwkWCM328

Targets

- Target
  foakTEjUOvL9nBY.exe
- Size 557KB
- SHA256 afd6bafa6a8d82e932299d940a71eb03ce9c9f01e1818589500af3ea59c6cebc
- MD5 48528d26cfaed274c20c383a5f3ab9e5
- SHA1 2afde314bd93498a0c7260912a7cf67312f49f4f
- SHA512 a3ffa9da7f288a97e41397c3c1bc62fe3f85bd1465e45e6e187b9c5ae7be0991a27419bd1cce99a1b8fbf7526375b217ae7621affbf9b46897f30764995eb405
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan