agenttesla | 14b8d85d0d19f24e709e4edac6a199a6cb72ebff3fef1948b6489f31e5e268f0 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
3ceed1956213d2e9083b2d49b9e17935.exe
Size 685KB
Sample210617-6z6exrb2rn
SHA256 14b8d85d0d19f24e709e4edac6a199a6cb72ebff3fef1948b6489f31e5e268f0
MD5 3ceed1956213d2e9083b2d49b9e17935
SHA1 9c3c270118387a38ecba016f0ace2e0136da4b4d
SHA512 5ea8c4572ca8bcc3a7273e2ea5d5ff863b8939587c717773cad726224e1948ef3c57eb91d7107a10929362aa8cb4c71f319adfb38cf5507592180e7c9c9b2bd9
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.labexpo.com
Port
587
Username
[email protected]
Password
Can#[email protected]

Targets

- Target
  3ceed1956213d2e9083b2d49b9e17935.exe
- Size 685KB
- SHA256 14b8d85d0d19f24e709e4edac6a199a6cb72ebff3fef1948b6489f31e5e268f0
- MD5 3ceed1956213d2e9083b2d49b9e17935
- SHA1 9c3c270118387a38ecba016f0ace2e0136da4b4d
- SHA512 5ea8c4572ca8bcc3a7273e2ea5d5ff863b8939587c717773cad726224e1948ef3c57eb91d7107a10929362aa8cb4c71f319adfb38cf5507592180e7c9c9b2bd9
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan