agenttesla | 564496c7ccf2f1778237b048e411e0a50f61b0fbedfca9baa758f7bfc82d5b49 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.Olock.1.1431.5061
Size 1003KB
Sample220808-e64wzsdcam
SHA256 564496c7ccf2f1778237b048e411e0a50f61b0fbedfca9baa758f7bfc82d5b49
MD5 5c61df9c789bcab3adce3a2be1785da9
SHA1 b688e6ce8074b7d38fb43c8a71ebd706c8526e0f
SHA512 8cd37c747831bf41a5fab1ec3cd2ee5f0fa939da9144e79036a3d3ee5c1d2efb1931009fd341f26d2a9cfe0c3148f1b91022d698729215459729092afe2df585
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.jubana.cam
Port
587
Username
[email protected]
Password
3_sdYb:Q@pq5
Email to
[email protected]

Targets

- Target
  SecuriteInfo.com.Trojan.Olock.1.1431.5061
- Size 1003KB
- SHA256 564496c7ccf2f1778237b048e411e0a50f61b0fbedfca9baa758f7bfc82d5b49
- MD5 5c61df9c789bcab3adce3a2be1785da9
- SHA1 b688e6ce8074b7d38fb43c8a71ebd706c8526e0f
- SHA512 8cd37c747831bf41a5fab1ec3cd2ee5f0fa939da9144e79036a3d3ee5c1d2efb1931009fd341f26d2a9cfe0c3148f1b91022d698729215459729092afe2df585
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan