agenttesla | 5753fdf0845db0abe46df0bd5fee88a514615554ff9a7c8b9d1d1f08e9f69573 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Payment Advice Note from 26.05.2021 to 608710.exe
Size 688KB
Sample210526-ejsxwnfxjj
SHA256 5753fdf0845db0abe46df0bd5fee88a514615554ff9a7c8b9d1d1f08e9f69573
MD5 be4b574178e4e4aca4f776812f07da73
SHA1 d2bfe4cb0bbc3045c4cd20a1e7054e06c37f33d9
SHA512 8ec5c17e6e72a72d2ef2f25032ef77a95293b6310e88fdc058a6d3c2f32334fc95fff3cd052aac806ab3abc655d64b058d3ccbaf6afeee588baa1366cba8e683
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.ascobahkk.com
Port
587
Username
[email protected]
Password
xXlyWel0

Targets

- Target
  Payment Advice Note from 26.05.2021 to 608710.exe
- Size 688KB
- SHA256 5753fdf0845db0abe46df0bd5fee88a514615554ff9a7c8b9d1d1f08e9f69573
- MD5 be4b574178e4e4aca4f776812f07da73
- SHA1 d2bfe4cb0bbc3045c4cd20a1e7054e06c37f33d9
- SHA512 8ec5c17e6e72a72d2ef2f25032ef77a95293b6310e88fdc058a6d3c2f32334fc95fff3cd052aac806ab3abc655d64b058d3ccbaf6afeee588baa1366cba8e683
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan