agenttesla

General

Target

16239fd023bc9cf3b827ff8e52e15b97b504eac112924550b34e38b04e44889d
Size

720KB
Sample

220221-3jjjjabfd8
MD5

ff5f0a439e56b1a27ad7443ac5b671fa
SHA1

c2f55ec434bc16ee084830f643d3e52bf446f696
SHA256

16239fd023bc9cf3b827ff8e52e15b97b504eac112924550b34e38b04e44889d
SHA512

7f3fd444e4920712833f45f5705bb56b7f2d5b98841c6bbfd26dd3876547ebed44b9c11874b2b496303f72d79f5ddc035838c29f9265eda103981033953736c0

Score

10^/10

Malware Config

Targets

- Target
  
  090008000000000000.exe
- Size
  
  1.2MB
- MD5
  
  4c7fe9c4af3c08960d1490c0ba409694
- SHA1
  
  67b090a0aab7e6452d4fba12f2d625e276402096
- SHA256
  
  614f64c6f6fb4e6a6bdb91333773972139b112937bff6a22e19c9a5d283b8097
- SHA512
  
  a5d70d3958b0979f39d2417cdfb26de1aac81482d48151310fa8cf99ad0d7ddeb83f1812ac611debd7ee052adb7bd109d5828e09a2fd765be2dbf5e35a3889a6
Score

10^/10

agenttesla matiex snakekeylogger collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Matiex
  Matiex is a keylogger and infostealer first seen in July 2020.
  stealer keylogger matiex
- Matiex Main Payload
- Snake Keylogger
  Keylogger and Infostealer first seen in November 2020.
  stealer keylogger snakekeylogger
- AgentTesla Payload
- Executes dropped EXE
- Drops startup file
- Loads dropped DLL
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of SetThreadContext
behavioral1 behavioral2