agenttesla | 4acc7cd61a515fbc9e62b57c7f2428957a2805210dbdffb67d03fcc5ddcf3c38 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
17e3351ac9b583cbd6ad8d6092f9d687
Size 873KB
Sample211005-syl8vsaae3
SHA256 4acc7cd61a515fbc9e62b57c7f2428957a2805210dbdffb67d03fcc5ddcf3c38
MD5 17e3351ac9b583cbd6ad8d6092f9d687
SHA1 5095dc963b96e806fe6978621491a8aabf592053
SHA512 c7e05f0bfc38378fb6c89562d9c51f2320b22da1825e93e331b6cc9bb05bde856d71ca2f0b6b9f4cf7beb3afc0192834e309b02b9550532ec02d3ed17999fe6b
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1923270472:AAFHljVp-f8Q5-X0iy70Vfe0aTch5THPa-U/sendDocument

Targets

- Target
  17e3351ac9b583cbd6ad8d6092f9d687
- Size 873KB
- SHA256 4acc7cd61a515fbc9e62b57c7f2428957a2805210dbdffb67d03fcc5ddcf3c38
- MD5 17e3351ac9b583cbd6ad8d6092f9d687
- SHA1 5095dc963b96e806fe6978621491a8aabf592053
- SHA512 c7e05f0bfc38378fb6c89562d9c51f2320b22da1825e93e331b6cc9bb05bde856d71ca2f0b6b9f4cf7beb3afc0192834e309b02b9550532ec02d3ed17999fe6b
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan