agenttesla | 9fe5ea4e91dd5a5343e7f965f898a77451ab3a2e19ecab18b1b2676f81180ff0 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
5e9e1d06_by_Libranalysis
Size 754KB
Sample210507-c66zhwcsaj
SHA256 9fe5ea4e91dd5a5343e7f965f898a77451ab3a2e19ecab18b1b2676f81180ff0
MD5 5e9e1d0691bd62ee31092030d8390545
SHA1 81078d12dd50c64980a68c79283da933047c254d
SHA512 66791610df340fbaf1635a7cf24e1afc4c5bd14d2c8fc7c7294d3696d18ac684072bb1589312900c10ced1ba170a84b2c35e4aec3245239f582bdbbb95b5b783
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.1and1.es
Port
587
Username
[email protected]
Password
Isabel@tu10

Targets

- Target
  5e9e1d06_by_Libranalysis
- Size 754KB
- SHA256 9fe5ea4e91dd5a5343e7f965f898a77451ab3a2e19ecab18b1b2676f81180ff0
- MD5 5e9e1d0691bd62ee31092030d8390545
- SHA1 81078d12dd50c64980a68c79283da933047c254d
- SHA512 66791610df340fbaf1635a7cf24e1afc4c5bd14d2c8fc7c7294d3696d18ac684072bb1589312900c10ced1ba170a84b2c35e4aec3245239f582bdbbb95b5b783
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan