agenttesla | b42810cd608efd9b6058c018518048874d453ed62663f8a1ac2a2c6f2227b0c8 | Triage

Submit
Reports

Overview

overview

Static

static

Released Order.exe

windows7_x64

Released Order.exe

windows10_x64

Sharing

General

Target

Released Order.exe
Size

1.2MB
Sample

210721-gg471cf2tx
MD5

13d3d8d9c655b799acce27ab6091847b
SHA1

a6e4e5363591c59bd99986e71a668f6d9c4b8550
SHA256

b42810cd608efd9b6058c018518048874d453ed62663f8a1ac2a2c6f2227b0c8
SHA512

593e96b5965415bd35fc7f41587d21ed17aae5d9c6b610c7ae9730e9da6152ac6ece0ebec370abfdde3aa95bf2e46f57a76accb1cc8388c40e00c98340401c8a

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

Released Order.exe

Resource

win7v20210410

agenttesla keylogger persistence spyware stealer trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

Released Order.exe

Resource

win10v20210410

agenttesla keylogger persistence spyware stealer trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.saitools.com
Port:
587
Username:
[email protected]
Password:
ecotanksystems$0912

Targets

- Target
  
  Released Order.exe
- Size
  
  1.2MB
- MD5
  
  13d3d8d9c655b799acce27ab6091847b
- SHA1
  
  a6e4e5363591c59bd99986e71a668f6d9c4b8550
- SHA256
  
  b42810cd608efd9b6058c018518048874d453ed62663f8a1ac2a2c6f2227b0c8
- SHA512
  
  593e96b5965415bd35fc7f41587d21ed17aae5d9c6b610c7ae9730e9da6152ac6ece0ebec370abfdde3aa95bf2e46f57a76accb1cc8388c40e00c98340401c8a
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2024

Terms | Privacy