agenttesla | dd2262c470cbff3cef7f965e0c457de414eb71bb0ad94ffc2d64aef577462d14 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Ref 10M-86776.exe
Size 1.0MB
Sample210722-2s9nsf2lma
SHA256 dd2262c470cbff3cef7f965e0c457de414eb71bb0ad94ffc2d64aef577462d14
MD5 b6e7578868743fb3b695b388dcce06b2
SHA1 1632882505f3f76b0962e767da08623357a59372
SHA512 00a75a815838c1ebb912456fc70d43a7a8f5cca76c2d9a355af047975e5de5d5511f04d80685397e12a0057e9141d1595055e69e5c90dd290d9f6637c888469b
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
webmail.ombakparadise.com
Port
587
Username
[email protected]
Password
ce$%^mirah

Targets

- Target
  Ref 10M-86776.exe
- Size 1.0MB
- SHA256 dd2262c470cbff3cef7f965e0c457de414eb71bb0ad94ffc2d64aef577462d14
- MD5 b6e7578868743fb3b695b388dcce06b2
- SHA1 1632882505f3f76b0962e767da08623357a59372
- SHA512 00a75a815838c1ebb912456fc70d43a7a8f5cca76c2d9a355af047975e5de5d5511f04d80685397e12a0057e9141d1595055e69e5c90dd290d9f6637c888469b
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan