agenttesla | 76c62f1e40aeb26bd5bbcf40f7f73894316433e9bb7c577ced6c266d9ff72344 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
6f7dab2799b7f32da668e6725f38f3f1.exe
Size 722KB
Sample210527-d2zxpvp2ss
SHA256 76c62f1e40aeb26bd5bbcf40f7f73894316433e9bb7c577ced6c266d9ff72344
MD5 6f7dab2799b7f32da668e6725f38f3f1
SHA1 f2437530a0ba10310bf4a28e8f987e09d2150179
SHA512 229e023e2aec7ae85d0980398eb10cc04994b3c68c27a8fe9bc65a57c7b03f3c7a10d144fa597f43386f7bf91458591c03cd38d332f899b99bfc911fda9d6689
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.mytravelws.com
Port
587
Username
[email protected]
Password
hbhf@--8hyhb#E6g

Targets

- Target
  6f7dab2799b7f32da668e6725f38f3f1.exe
- Size 722KB
- SHA256 76c62f1e40aeb26bd5bbcf40f7f73894316433e9bb7c577ced6c266d9ff72344
- MD5 6f7dab2799b7f32da668e6725f38f3f1
- SHA1 f2437530a0ba10310bf4a28e8f987e09d2150179
- SHA512 229e023e2aec7ae85d0980398eb10cc04994b3c68c27a8fe9bc65a57c7b03f3c7a10d144fa597f43386f7bf91458591c03cd38d332f899b99bfc911fda9d6689
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan