Overview

overview

10

Static

static

407d00ff86...7a.exe

windows7_x64

10

407d00ff86...7a.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    407d00ff864c23f7e0bba54b241a5a0ca3338536f379b01c9d3c4265ee3d5a7a

  • Size

    758KB

  • Sample

    220414-pxhbqscbb7

  • MD5

    b9f07eae87ab8f97846925ba316d0ced

  • SHA1

    fe930ddf51c68a9750ebd06fcf48ac0a57354d32

  • SHA256

    407d00ff864c23f7e0bba54b241a5a0ca3338536f379b01c9d3c4265ee3d5a7a

  • SHA512

    74b849e9c6d584d5294d06f3c8467f9f8b4fab4a4e94ae079f5e008880f4cdc83ab2e730023c0cbda9b57d405580e4ceefee169f24f989030ddc952eb0120351

Score
10/10
agentteslametastealerkeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

Targets

    • Target

      407d00ff864c23f7e0bba54b241a5a0ca3338536f379b01c9d3c4265ee3d5a7a

    • Size

      758KB

    • MD5

      b9f07eae87ab8f97846925ba316d0ced

    • SHA1

      fe930ddf51c68a9750ebd06fcf48ac0a57354d32

    • SHA256

      407d00ff864c23f7e0bba54b241a5a0ca3338536f379b01c9d3c4265ee3d5a7a

    • SHA512

      74b849e9c6d584d5294d06f3c8467f9f8b4fab4a4e94ae079f5e008880f4cdc83ab2e730023c0cbda9b57d405580e4ceefee169f24f989030ddc952eb0120351

    Score
    10/10
    agentteslakeyloggerspywarestealertrojanmetastealer

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Meta Stealer Stealer

      Meta Stealer steals passwords stored in browsers, written in C++.

      stealermetastealer

    • AgentTesla Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks