agenttesla | 011ed51cc9d788dd0fdb9f1f2ba5ed659503ef771efd4f7f8dd58a9fa07681b3 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
DOC 202910982722.exe
Size 872KB
Sample210616-s77754k6be
SHA256 011ed51cc9d788dd0fdb9f1f2ba5ed659503ef771efd4f7f8dd58a9fa07681b3
MD5 9cd55e17e1bdc301f1a4ff74860106b0
SHA1 9dd53ddeba3b2e027e7a9814b333da8c4305d312
SHA512 0a5e23045a7eab309ad89e841fe20d30e9c28bd7fc11092a47caf872c4929251b0fd4887e2d7eba6287b806b053dbf9925d4db9a16236a3414b8beaf8e9eb189
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.globaloffs-site.com
Port
587
Username
[email protected]
Password
yLxCDRZ2

Targets

- Target
  DOC 202910982722.exe
- Size 872KB
- SHA256 011ed51cc9d788dd0fdb9f1f2ba5ed659503ef771efd4f7f8dd58a9fa07681b3
- MD5 9cd55e17e1bdc301f1a4ff74860106b0
- SHA1 9dd53ddeba3b2e027e7a9814b333da8c4305d312
- SHA512 0a5e23045a7eab309ad89e841fe20d30e9c28bd7fc11092a47caf872c4929251b0fd4887e2d7eba6287b806b053dbf9925d4db9a16236a3414b8beaf8e9eb189
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan