agenttesla | 6461aaeb3fa82c8acccd75bb6b1443e9d59f8ea1c53ef92885f880c8fa2c74c6 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
79ee2fcb6b8263e799c02a23bb7e5c52.exe
Size 916KB
Sample210930-sp6k5sabdk
SHA256 6461aaeb3fa82c8acccd75bb6b1443e9d59f8ea1c53ef92885f880c8fa2c74c6
MD5 79ee2fcb6b8263e799c02a23bb7e5c52
SHA1 8b9153dd3d64c5a64dea525872cd897116138753
SHA512 7d3304dca2b4e5592497c9f3d5c3ec23dea6b83c8479ac21aa451800ba0c3caec4eb1d9c85cfb7806ba351e2163ac0b29282d962b6d799b077cb9b444d268568
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.redivieco.com
Port
587
Username
[email protected]
Password
Lzjyfk7BJy

Targets

- Target
  79ee2fcb6b8263e799c02a23bb7e5c52.exe
- Size 916KB
- SHA256 6461aaeb3fa82c8acccd75bb6b1443e9d59f8ea1c53ef92885f880c8fa2c74c6
- MD5 79ee2fcb6b8263e799c02a23bb7e5c52
- SHA1 8b9153dd3d64c5a64dea525872cd897116138753
- SHA512 7d3304dca2b4e5592497c9f3d5c3ec23dea6b83c8479ac21aa451800ba0c3caec4eb1d9c85cfb7806ba351e2163ac0b29282d962b6d799b077cb9b444d268568
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan