agenttesla | 4601621cfda56bc05c74eb9e906d082fe613dedbdd07fcec0dc9ba02e3f37a00 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
solo.exe
Size 846KB
Sample220128-vcwxaaggbp
SHA256 4601621cfda56bc05c74eb9e906d082fe613dedbdd07fcec0dc9ba02e3f37a00
MD5 509c2c9cf7e281ddde8289d7d9c1a14a
SHA1 f96470590239cf2b0581587a1237d420bfe8f456
SHA512 d9f14c9410395423bc8b4bc9f2acad6a7069eba710840fcda71215db3c4726766e5554dd596b0e8649b63fd3ee1331f9a1f50b23d16b0001979c07d67e259dba
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
n(aGI^pW6

Targets

- Target
  solo.exe
- Size 846KB
- SHA256 4601621cfda56bc05c74eb9e906d082fe613dedbdd07fcec0dc9ba02e3f37a00
- MD5 509c2c9cf7e281ddde8289d7d9c1a14a
- SHA1 f96470590239cf2b0581587a1237d420bfe8f456
- SHA512 d9f14c9410395423bc8b4bc9f2acad6a7069eba710840fcda71215db3c4726766e5554dd596b0e8649b63fd3ee1331f9a1f50b23d16b0001979c07d67e259dba
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan