agenttesla | c5398c5cfee92e6d601874b13643b6fc7c734ddac76c8b698af42686c26ce9d3 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
NEW P O.zip
Size 548KB
Sample210701-17ws17fb3e
SHA256 c5398c5cfee92e6d601874b13643b6fc7c734ddac76c8b698af42686c26ce9d3
MD5 130e6f99e95553fea7197f08ce1c9621
SHA1 cc3af68db6b24d7351cc41c5769a6106fc929542
SHA512 edb74199b12f7efcd9923c1bdc469016f9e320551c135d3d1d11bb6c84f81deb865fb6f75b56ccbd97d459709f198c31b11b9aba0b8138cd955fda09aa9df052
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.ombakparadise.com
Port
587
Username
[email protected]
Password
ce$%^mirah

Targets

- Target
  NEW P O.exe
- Size 590KB
- SHA256 4168cb7280d51dff7f076d035d5233f5008af3ea643b8ceb89ccb9db1f9b601b
- MD5 c09fa3db9aff3bed3ac0dc27e541447a
- SHA1 c08c2860fea7bb4c8676f12ff5e48a8fb31aad9b
- SHA512 4c087bae9cf80b6008da76bddd532dc2b79419c8e953deda9605d73359093a1e068770708a968430e6f802f0eaf2b208881ee6c07d43e1382c67f8babb05e831
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan