agenttesla | ab2bcb61ea3c3b5fe9dd5ee58339b6675e40f7adcafa134dbeaae86e4a616906 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Variant.Barys.317164.23232.29326
Size 394KB
Sample220726-kl179abca6
SHA256 ab2bcb61ea3c3b5fe9dd5ee58339b6675e40f7adcafa134dbeaae86e4a616906
MD5 d733321c2ce1799853876bce65256b47
SHA1 4d9d5a75503610962e59b7306137601190cb431d
SHA512 ecc78b38c66be319b31a42edbaf951c4c50db78e4baac7e779dd3d441d7e8a57149ee5909eee957ddf563d19973a82a9d1718ebd1bf2908c34aa9e859dfef23f
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5083863399:AAH9g72QTdN88jNOd6_tBrE8gEd-FpXnfHE/sendDocument

Targets

- Target
  SecuriteInfo.com.Variant.Barys.317164.23232.29326
- Size 394KB
- SHA256 ab2bcb61ea3c3b5fe9dd5ee58339b6675e40f7adcafa134dbeaae86e4a616906
- MD5 d733321c2ce1799853876bce65256b47
- SHA1 4d9d5a75503610962e59b7306137601190cb431d
- SHA512 ecc78b38c66be319b31a42edbaf951c4c50db78e4baac7e779dd3d441d7e8a57149ee5909eee957ddf563d19973a82a9d1718ebd1bf2908c34aa9e859dfef23f
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan