agenttesla | 4b0f3abe3b0c7a9356687b4c29c68f9bab4247ca92cf5c37b42eec2881d3d2ec | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
eVtkS8gn7klc0B7.exe
Size 1.1MB
Sample220329-tn3njacbbk
SHA256 4b0f3abe3b0c7a9356687b4c29c68f9bab4247ca92cf5c37b42eec2881d3d2ec
MD5 b218049fb1e0a83b803d3344749a28f3
SHA1 23e18e618caae3d34b734c0cb13a0750d73656f5
SHA512 236f89e6c051fd46dd3ff3875f1e55e8e002dd08226d3b9eb8fb1055d1f39ac92966b1f5105267507c17d324f8a4728520821d2b4b10b2130ffe120cba6ebf8f
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.balertsecurity.co.nz
Port
587
Username
[email protected]
Password
CoL5Lts9Glh2
Email to
[email protected]

Targets

- Target
  eVtkS8gn7klc0B7.exe
- Size 1.1MB
- SHA256 4b0f3abe3b0c7a9356687b4c29c68f9bab4247ca92cf5c37b42eec2881d3d2ec
- MD5 b218049fb1e0a83b803d3344749a28f3
- SHA1 23e18e618caae3d34b734c0cb13a0750d73656f5
- SHA512 236f89e6c051fd46dd3ff3875f1e55e8e002dd08226d3b9eb8fb1055d1f39ac92966b1f5105267507c17d324f8a4728520821d2b4b10b2130ffe120cba6ebf8f
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan