agenttesla | 418b8285d8a2e7129052ca76c5f30243713e543ee94b603cc71858566d15e50b | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
70LT1PeYjLyvKWV.exe
Size 510KB
Sample210520-srvyv3jzka
SHA256 418b8285d8a2e7129052ca76c5f30243713e543ee94b603cc71858566d15e50b
MD5 b1f71fa691b4d4d3e59e3e2dc2cba9b1
SHA1 bf3bf454402888ee234c7a12d921b402d50ca3ff
SHA512 a14c28b1548c5d657b63bfd11345fcfceaf49ae5b1fdccb73a1f480d9c6bcf71b96ef97fafdd0bed6a2483dc8a7db26bdf64f7c2b5fe837954f251a5b691c386
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
webmail.emirtecnt.com
Port
587
Username
[email protected]
Password
BLESSINGSFOLLOWUS@2021

Targets

- Target
  70LT1PeYjLyvKWV.exe
- Size 510KB
- SHA256 418b8285d8a2e7129052ca76c5f30243713e543ee94b603cc71858566d15e50b
- MD5 b1f71fa691b4d4d3e59e3e2dc2cba9b1
- SHA1 bf3bf454402888ee234c7a12d921b402d50ca3ff
- SHA512 a14c28b1548c5d657b63bfd11345fcfceaf49ae5b1fdccb73a1f480d9c6bcf71b96ef97fafdd0bed6a2483dc8a7db26bdf64f7c2b5fe837954f251a5b691c386
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan