agenttesla | 7b0340db069b8349072b08b00b101e2f980baecddc4f8038aff3068bb23ab949 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
#3120334.exe
Size 986KB
Sample210615-ghdn327986
SHA256 7b0340db069b8349072b08b00b101e2f980baecddc4f8038aff3068bb23ab949
MD5 c71be1c6b68bbcc05d9f4a4fc4c5c840
SHA1 a5878b5bf506ddadf4a98f5f3aaebc50e533f501
SHA512 6238b6e7597cd374f5e002b6048d6cd684912c4901b86e5dedfe1c2a19c6c85adf9560a9ef2904291118c2df10edb0a30d31c3a7ebb0a6cb904faf09887621e3
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.roplantpakistan.com
Port
587
Username
[email protected]
Password
ro3000GPD

Targets

- Target
  #3120334.exe
- Size 986KB
- SHA256 7b0340db069b8349072b08b00b101e2f980baecddc4f8038aff3068bb23ab949
- MD5 c71be1c6b68bbcc05d9f4a4fc4c5c840
- SHA1 a5878b5bf506ddadf4a98f5f3aaebc50e533f501
- SHA512 6238b6e7597cd374f5e002b6048d6cd684912c4901b86e5dedfe1c2a19c6c85adf9560a9ef2904291118c2df10edb0a30d31c3a7ebb0a6cb904faf09887621e3
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan