agenttesla | 63d90793ac2e572399270a4bc711722db3140f8e566ee086edee17d19f3bca13 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
9a469f6de779995908283daeda4b6f96
Size 939KB
Sample210928-l6argabed2
SHA256 63d90793ac2e572399270a4bc711722db3140f8e566ee086edee17d19f3bca13
MD5 9a469f6de779995908283daeda4b6f96
SHA1 0b59965aaceec37de9409a9dae1f154e9ba51d23
SHA512 37ae8903c0656c27c3bd1990f3c7c1e7e88918cc81f406cd58f26b1489a7e94b523295d5ee19faf3c4faeb034899f8f71915564359ab7cd5cae0b62d960e145c
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.redivieco.com
Port
587
Username
[email protected]
Password
Smtpzo.com@45633

Targets

- Target
  9a469f6de779995908283daeda4b6f96
- Size 939KB
- SHA256 63d90793ac2e572399270a4bc711722db3140f8e566ee086edee17d19f3bca13
- MD5 9a469f6de779995908283daeda4b6f96
- SHA1 0b59965aaceec37de9409a9dae1f154e9ba51d23
- SHA512 37ae8903c0656c27c3bd1990f3c7c1e7e88918cc81f406cd58f26b1489a7e94b523295d5ee19faf3c4faeb034899f8f71915564359ab7cd5cae0b62d960e145c
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan