agenttesla | e2e7cc72bc5d7046056f1784e2b21f760359131dbb37329e880211cf28ee69d0 | Triage

Sharing

General

Target

fea30b1b6cf409b3e29c703cea59f179f8c426d6
Size

37KB
Sample

230203-x34qxsad39
MD5

af72e06f3c672737077fd04a6cd44af1
SHA1

fea30b1b6cf409b3e29c703cea59f179f8c426d6
SHA256

e2e7cc72bc5d7046056f1784e2b21f760359131dbb37329e880211cf28ee69d0
SHA512

c33e555243abb294436331d269de134283c71d9f7ecd94b1e05e69c04a230d6a1653c1d9e7ad7abfa440df227ca3e1591194c53b71dec637bc103244d003264e
SSDEEP

768:YevzNw901TxGi+ZPc3XyvgQu9Et+mZqt5RYVMLvZO4v:zNwe1T4i+ZPoXyYQss++qtfYys

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.elec-qatar.com
Port:
587
Username:
[email protected]
Password:
MHabrar2019@#
Email To:
[email protected]

Targets

- Target
  
  fea30b1b6cf409b3e29c703cea59f179f8c426d6
- Size
  
  37KB
- MD5
  
  af72e06f3c672737077fd04a6cd44af1
- SHA1
  
  fea30b1b6cf409b3e29c703cea59f179f8c426d6
- SHA256
  
  e2e7cc72bc5d7046056f1784e2b21f760359131dbb37329e880211cf28ee69d0
- SHA512
  
  c33e555243abb294436331d269de134283c71d9f7ecd94b1e05e69c04a230d6a1653c1d9e7ad7abfa440df227ca3e1591194c53b71dec637bc103244d003264e
- SSDEEP
  
  768:YevzNw901TxGi+ZPc3XyvgQu9Et+mZqt5RYVMLvZO4v:zNwe1T4i+ZPoXyYQss++qtfYys
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Uses the VBS compiler for execution
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scripting

Persistence

Privilege Escalation

Defense Evasion

Scripting

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan