agenttesla | 9e01ae7cd52f6fd9e404cff6bfde35ed141fa7aa8f63187eef4d4460a99c40ae | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
vm6J9rrLkhCfxJx.exe
Size 922KB
Sample210602-fpexrh9nes
SHA256 9e01ae7cd52f6fd9e404cff6bfde35ed141fa7aa8f63187eef4d4460a99c40ae
MD5 7f52143ff182b8749a215948d5a7d42b
SHA1 f44d3be8c81218f3b4706e182ad17d316abb198a
SHA512 c963378414ac7389f4cb9f17bc2b7915d8a9f32f569a0b8aa09ac74e0fefb117b87d9a6ef09ef073bf4a8b35efd96c5632a4c231c80add283728cc12f94133a3
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.filtroindustrial.net
Port
587
Username
[email protected]
Password
ZcLwgOI5

Targets

- Target
  vm6J9rrLkhCfxJx.exe
- Size 922KB
- SHA256 9e01ae7cd52f6fd9e404cff6bfde35ed141fa7aa8f63187eef4d4460a99c40ae
- MD5 7f52143ff182b8749a215948d5a7d42b
- SHA1 f44d3be8c81218f3b4706e182ad17d316abb198a
- SHA512 c963378414ac7389f4cb9f17bc2b7915d8a9f32f569a0b8aa09ac74e0fefb117b87d9a6ef09ef073bf4a8b35efd96c5632a4c231c80add283728cc12f94133a3
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan