agenttesla | 0bd991c7063fbfb58f4d57e32b75e55729e1061110f197e2ce27468de52b6c6d | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
4It7P3KCyYHUWHU.exe
Size 766KB
Sample210609-n5mc64ftdj
SHA256 0bd991c7063fbfb58f4d57e32b75e55729e1061110f197e2ce27468de52b6c6d
MD5 bdff3540e8d0808273c6b2190dbcf513
SHA1 6e73a70e781b56ba46b1ff20f84e87efb018c337
SHA512 a9303ea4eb1ebe2589e5e67481907c087c2c724bbd5578ce7390b9096a8e88ccbd11212254f2e4ff88238050bf660361460dda8292fb60ef1359e443842d7612
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.filtroindustrial.net
Port
587
Username
[email protected]
Password
ZcLwgOI5

Targets

- Target
  4It7P3KCyYHUWHU.exe
- Size 766KB
- SHA256 0bd991c7063fbfb58f4d57e32b75e55729e1061110f197e2ce27468de52b6c6d
- MD5 bdff3540e8d0808273c6b2190dbcf513
- SHA1 6e73a70e781b56ba46b1ff20f84e87efb018c337
- SHA512 a9303ea4eb1ebe2589e5e67481907c087c2c724bbd5578ce7390b9096a8e88ccbd11212254f2e4ff88238050bf660361460dda8292fb60ef1359e443842d7612
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan