agenttesla | 11d04c12597ad35e1a5be1ae7cc53114fb0796812d7370dcfc21e126e8aafa80 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
RFQ_TERMS_107_10702062207_0_US.exe
Size 817KB
Sample210618-nxgf96jpj6
SHA256 11d04c12597ad35e1a5be1ae7cc53114fb0796812d7370dcfc21e126e8aafa80
MD5 e31c2e4b3ac0c48e04b7ca4b7c702a36
SHA1 7361af49a61af295dd85dceb38b83e47cc77a608
SHA512 d31fe89ebcddb569648196299ca40dec1254f605869ad12340d38424c47c1a8ab9beb5aca9b84c30ff341d7482018ae8da680691b0a3541bb5234c06b61ec6a5
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
box5363.bluehost.com
Port
587
Username
[email protected]
Password
Hajarbh@1993

Targets

- Target
  RFQ_TERMS_107_10702062207_0_US.exe
- Size 817KB
- SHA256 11d04c12597ad35e1a5be1ae7cc53114fb0796812d7370dcfc21e126e8aafa80
- MD5 e31c2e4b3ac0c48e04b7ca4b7c702a36
- SHA1 7361af49a61af295dd85dceb38b83e47cc77a608
- SHA512 d31fe89ebcddb569648196299ca40dec1254f605869ad12340d38424c47c1a8ab9beb5aca9b84c30ff341d7482018ae8da680691b0a3541bb5234c06b61ec6a5
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan