agenttesla | 0ecdaed3a2f731cdf1a09bb7aa353d3c9dabb5898409e249edb3dbda64569cbb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
STATEMENT OF ACCOUNT February 6, 2022..exe
Size 598KB
Sample220208-ce2anscaa8
SHA256 0ecdaed3a2f731cdf1a09bb7aa353d3c9dabb5898409e249edb3dbda64569cbb
MD5 f3f7a3916f709a22a51cde0483274999
SHA1 c45462ff355257070d83d1e777e2535405337fe8
SHA512 0706d2f89df40a51738dd064f248b71d8691e05ccdcb99831552fc0983586aebf2f8d828818124443d6b612b9a960ba9653b86606cfeb6d2d31f7b77106e4eee
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
BkKMmzZ1

Targets

- Target
  STATEMENT OF ACCOUNT February 6, 2022..exe
- Size 598KB
- SHA256 0ecdaed3a2f731cdf1a09bb7aa353d3c9dabb5898409e249edb3dbda64569cbb
- MD5 f3f7a3916f709a22a51cde0483274999
- SHA1 c45462ff355257070d83d1e777e2535405337fe8
- SHA512 0706d2f89df40a51738dd064f248b71d8691e05ccdcb99831552fc0983586aebf2f8d828818124443d6b612b9a960ba9653b86606cfeb6d2d31f7b77106e4eee
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan