agenttesla | 514eafb249e57467701d283fa0dea7af7c4761d6f60da2cbc7348c65e0c11501 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
a1272595_by_Libranalysis
Size 711KB
Sample210510-ca7cffkg82
SHA256 514eafb249e57467701d283fa0dea7af7c4761d6f60da2cbc7348c65e0c11501
MD5 a127259567201bd844e1d2e947aae1a0
SHA1 52196a873cd84d04d4afcfe614255f14efdd3023
SHA512 af4b50e9cfd8f4786124529fed45695f4f74e1dd221380248b96de917112ad5496ea8293cb0a740fcad2e46248149065fbbf579526b96938d1b7e0f42ce87298
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.hybridgroupco.com
Port
587
Username
[email protected]
Password
LQWAR!ncl^vx

Targets

- Target
  a1272595_by_Libranalysis
- Size 711KB
- SHA256 514eafb249e57467701d283fa0dea7af7c4761d6f60da2cbc7348c65e0c11501
- MD5 a127259567201bd844e1d2e947aae1a0
- SHA1 52196a873cd84d04d4afcfe614255f14efdd3023
- SHA512 af4b50e9cfd8f4786124529fed45695f4f74e1dd221380248b96de917112ad5496ea8293cb0a740fcad2e46248149065fbbf579526b96938d1b7e0f42ce87298
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan