agenttesla | 36cab5247296638ca5b35c4fcf864a06452718f5bf8b72fa41a620a06d9d67f1 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
953055e0715e637ff0f7fe84b126eac9.exe
Size 506KB
Sample210819-q3f2dckz72
SHA256 36cab5247296638ca5b35c4fcf864a06452718f5bf8b72fa41a620a06d9d67f1
MD5 953055e0715e637ff0f7fe84b126eac9
SHA1 838a32b6c61b5613d8909c924a22e526f3d36040
SHA512 e8ef2e3c318bc672a9e7743d9a41d1eeead0eb4a1ce6ac3bb7568f79def1491ba17970b145bd6fe368c869eeabb594d23d1941972be0860847ae6e1466d0e7d1
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1941938286:AAGAe0D246xCexnnIlc5tnVIKUh9X2ishD0/sendDocument

Targets

- Target
  953055e0715e637ff0f7fe84b126eac9.exe
- Size 506KB
- SHA256 36cab5247296638ca5b35c4fcf864a06452718f5bf8b72fa41a620a06d9d67f1
- MD5 953055e0715e637ff0f7fe84b126eac9
- SHA1 838a32b6c61b5613d8909c924a22e526f3d36040
- SHA512 e8ef2e3c318bc672a9e7743d9a41d1eeead0eb4a1ce6ac3bb7568f79def1491ba17970b145bd6fe368c869eeabb594d23d1941972be0860847ae6e1466d0e7d1
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan