agenttesla | 0fcdec51d3f5265149844d452827fdddf15d7bb180852f95b27ec9e28680ae99 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PR-007493 PR-007495.exe
Size 554KB
Sample211027-e5y94safb9
SHA256 0fcdec51d3f5265149844d452827fdddf15d7bb180852f95b27ec9e28680ae99
MD5 19dc0dbd68364e6d2f492aaea1d94772
SHA1 e9ace56da3f580e6103fa7cc5297c8a7a0bdc567
SHA512 25054a97ce574e2e3fd1b19a87e33614de29b1a9d4580754631aa97a1c2462b623b51b555c17fdcf05ce051d2499b361fd2ebb9011f6c8a833d887a06e516544
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1975237880:AAHKgRnseXCSSPJw6MgfujMF0PvBjyMOsXc/sendDocument

Targets

- Target
  PR-007493 PR-007495.exe
- Size 554KB
- SHA256 0fcdec51d3f5265149844d452827fdddf15d7bb180852f95b27ec9e28680ae99
- MD5 19dc0dbd68364e6d2f492aaea1d94772
- SHA1 e9ace56da3f580e6103fa7cc5297c8a7a0bdc567
- SHA512 25054a97ce574e2e3fd1b19a87e33614de29b1a9d4580754631aa97a1c2462b623b51b555c17fdcf05ce051d2499b361fd2ebb9011f6c8a833d887a06e516544
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan