agenttesla | 83a086432a8a3d8b65e2a0a4d5d139553cfaef97856424fccb4b11a813518ae1 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Artemis9889198DFC74.22245.24677
Size 728KB
Sample210607-pb4fftmlfa
SHA256 83a086432a8a3d8b65e2a0a4d5d139553cfaef97856424fccb4b11a813518ae1
MD5 9889198dfc74076d3c15be83bc55f08b
SHA1 362cb81713ff3f01390f33ae7e5e9e0ae727a99f
SHA512 96d63c23c96da09392bb6618716a2260814421772855d05d8444b977c037923f721745a0fc5f9640589eb5ae3e603695d467281a58cc49750ff8fc99b1449b81
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.roplantpakistan.com
Port
587
Username
[email protected]
Password
ro3000GPD

Targets

- Target
  SecuriteInfo.com.Artemis9889198DFC74.22245.24677
- Size 728KB
- SHA256 83a086432a8a3d8b65e2a0a4d5d139553cfaef97856424fccb4b11a813518ae1
- MD5 9889198dfc74076d3c15be83bc55f08b
- SHA1 362cb81713ff3f01390f33ae7e5e9e0ae727a99f
- SHA512 96d63c23c96da09392bb6618716a2260814421772855d05d8444b977c037923f721745a0fc5f9640589eb5ae3e603695d467281a58cc49750ff8fc99b1449b81
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan