agenttesla | 60c23ce76877e976902420611599637eea4a65f71502d8553fb2fb45e8c3cc19 | Triage

Submit
Reports

Overview

overview

Static

static

AWB_000000...90.exe

windows7_x64

AWB_000000...90.exe

windows10_x64

Sharing

General

Target

AWB_00000000000000000090.exe
Size

534KB
Sample

211019-pvqkbsgfgq
MD5

f792128468a34fc63afa4a8a5b4848c9
SHA1

e05546777bd1717c27c7c6adea072ddfa1b7574b
SHA256

60c23ce76877e976902420611599637eea4a65f71502d8553fb2fb45e8c3cc19
SHA512

ac54c1435353af04f4f88bb0067781bc5de540da4f99022bde87ffecaa9a507558035425a9735ad2b8bcf846701dc28cd21699640ef392280169ce67df4d4669

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

AWB_00000000000000000090.exe

Resource

win7-en-20210920

agenttesla collection keylogger spyware stealer trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

AWB_00000000000000000090.exe

Resource

win10-en-20211014

agenttesla collection keylogger spyware stealer trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.medtec-germany.com
Port:
587
Username:
[email protected]
Password:
vfPjbzH2

Targets

- Target
  
  AWB_00000000000000000090.exe
- Size
  
  534KB
- MD5
  
  f792128468a34fc63afa4a8a5b4848c9
- SHA1
  
  e05546777bd1717c27c7c6adea072ddfa1b7574b
- SHA256
  
  60c23ce76877e976902420611599637eea4a65f71502d8553fb2fb45e8c3cc19
- SHA512
  
  ac54c1435353af04f4f88bb0067781bc5de540da4f99022bde87ffecaa9a507558035425a9735ad2b8bcf846701dc28cd21699640ef392280169ce67df4d4669
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy