agenttesla | c0e4dcda04ddac9d111ae112d8cb134ed18c5eb060fa0d7073c34d47e6c6f86d | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
YDHhjjAEFbel88t.exe
Size 628KB
Sample210510-np7394wr4e
SHA256 c0e4dcda04ddac9d111ae112d8cb134ed18c5eb060fa0d7073c34d47e6c6f86d
MD5 0b32b3b4fc32f018fdc9c798424028ab
SHA1 b5432e8e4d7478885ed6bf544bc4752e975cacfa
SHA512 f9dd77aaefe5a642a84a23c460f80eb1d6b8e044d22ef9d57e46da1a28ed7ca209c7d1435a9f2f782b20dcb730fe089c82e4845d6124889ac3da7ed1beda3bd7
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.iymorenterprizelogs.com
Port
587
Username
[email protected]
Password
nxLq9soWurW3

Targets

- Target
  YDHhjjAEFbel88t.exe
- Size 628KB
- SHA256 c0e4dcda04ddac9d111ae112d8cb134ed18c5eb060fa0d7073c34d47e6c6f86d
- MD5 0b32b3b4fc32f018fdc9c798424028ab
- SHA1 b5432e8e4d7478885ed6bf544bc4752e975cacfa
- SHA512 f9dd77aaefe5a642a84a23c460f80eb1d6b8e044d22ef9d57e46da1a28ed7ca209c7d1435a9f2f782b20dcb730fe089c82e4845d6124889ac3da7ed1beda3bd7
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan