agenttesla | fae1d2f06c1a94881d1182a778c42cd1078d47ff2784d94384bc676b9779be8a | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
New order 26.05.2021.exe
Size 1.1MB
Sample210526-3e5mgrb222
SHA256 fae1d2f06c1a94881d1182a778c42cd1078d47ff2784d94384bc676b9779be8a
MD5 e00b0a57ecc77a6598100c0b20fec15f
SHA1 a5be0ac47d165e632b1582bf909a6fe864f95584
SHA512 e782c2b7501e129c332eb5188451d08cf768f53ea8141061f4bf8ddd35e8a358f235592aba36fe232973272dfdbb5a02a9aba18aabec35b77347bd81ef3fb26a
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.aldhiyafainteriors.com
Port
587
Username
[email protected]
Password
dhiyafa@987

Targets

- Target
  New order 26.05.2021.exe
- Size 1.1MB
- SHA256 fae1d2f06c1a94881d1182a778c42cd1078d47ff2784d94384bc676b9779be8a
- MD5 e00b0a57ecc77a6598100c0b20fec15f
- SHA1 a5be0ac47d165e632b1582bf909a6fe864f95584
- SHA512 e782c2b7501e129c332eb5188451d08cf768f53ea8141061f4bf8ddd35e8a358f235592aba36fe232973272dfdbb5a02a9aba18aabec35b77347bd81ef3fb26a
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan