agenttesla | 7010a3eb3e0b8019f4e9dbdcf0e83197c8a898a56c274bfe939002095310e9d1 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Payment Advice 09092021 HSBC customer information.exe
Size 720KB
Sample210909-qaccmsgbg6
SHA256 7010a3eb3e0b8019f4e9dbdcf0e83197c8a898a56c274bfe939002095310e9d1
MD5 26c8574c931f4ef4a4694e7d5659edc1
SHA1 d5b1f7c73bdd0291be16254cb44a7c5d1b872fbd
SHA512 4a528b28712bfb91cb0b5d57c01e4d2d734a228453bfd62cd4721739ba4753159dfa104698921679d91126f3204b0113786b1b2b92a2d592dd1fa658d8fbcb11
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.pnmetal.com
Port
587
Username
[email protected]
Password
ihouOgf9

Targets

- Target
  Payment Advice 09092021 HSBC customer information.exe
- Size 720KB
- SHA256 7010a3eb3e0b8019f4e9dbdcf0e83197c8a898a56c274bfe939002095310e9d1
- MD5 26c8574c931f4ef4a4694e7d5659edc1
- SHA1 d5b1f7c73bdd0291be16254cb44a7c5d1b872fbd
- SHA512 4a528b28712bfb91cb0b5d57c01e4d2d734a228453bfd62cd4721739ba4753159dfa104698921679d91126f3204b0113786b1b2b92a2d592dd1fa658d8fbcb11
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan