agenttesla | 06b85bd52f36bb069b1bdf8686a2d5ef83ee5c4b1eaeab65d8483ad8f4c02c5d | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
017a3915_by_Libranalysis
Size 551KB
Sample210430-w792znba6a
SHA256 06b85bd52f36bb069b1bdf8686a2d5ef83ee5c4b1eaeab65d8483ad8f4c02c5d
MD5 017a3915ee87495923f31224e09c2b75
SHA1 66fd3d765f6636ee3c15b0074a2a27af75d52521
SHA512 eb3c91d14c4ddd46de555ceefcb0be58904f42c824d80d163581bcaffc7540ffc33d8ea54a156c334c7fd0037eb25bd33bfbe565286aa849f2ebb9bbc314af71
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
XKzOC$Y7

Targets

- Target
  017a3915_by_Libranalysis
- Size 551KB
- SHA256 06b85bd52f36bb069b1bdf8686a2d5ef83ee5c4b1eaeab65d8483ad8f4c02c5d
- MD5 017a3915ee87495923f31224e09c2b75
- SHA1 66fd3d765f6636ee3c15b0074a2a27af75d52521
- SHA512 eb3c91d14c4ddd46de555ceefcb0be58904f42c824d80d163581bcaffc7540ffc33d8ea54a156c334c7fd0037eb25bd33bfbe565286aa849f2ebb9bbc314af71
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan