agenttesla | 52b732cacb489185a32d537cfab532789b8a8efe3d3b6fb93221bf8617cac915 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
TMXodV9oPtPfpUS.exe
Size 693KB
Sample210507-v2cwwnes8a
SHA256 52b732cacb489185a32d537cfab532789b8a8efe3d3b6fb93221bf8617cac915
MD5 f6753da8a0326188e87955f1ce346e60
SHA1 c8420c40c7c6f01e1ac8dc7130d9ec0d3d90522d
SHA512 8b0a60a33f3d2cf301e3ee2c123f82695508de2c92b20f66427f639b6920ef59da9a2d94c67f8c239546ff0f6491a3682bb8e112583e450146fee161e28b0159
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.iykmoreentrprise.org
Port
587
Username
[email protected]
Password
rwkWCM328

Targets

- Target
  TMXodV9oPtPfpUS.exe
- Size 693KB
- SHA256 52b732cacb489185a32d537cfab532789b8a8efe3d3b6fb93221bf8617cac915
- MD5 f6753da8a0326188e87955f1ce346e60
- SHA1 c8420c40c7c6f01e1ac8dc7130d9ec0d3d90522d
- SHA512 8b0a60a33f3d2cf301e3ee2c123f82695508de2c92b20f66427f639b6920ef59da9a2d94c67f8c239546ff0f6491a3682bb8e112583e450146fee161e28b0159
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan