agenttesla

General

Target
af1bcd9ba9a15d74a8819dc87f8032d22c4f26b4b5d10577e6544fa9674c7fbd.exe
Size 164KB
Sample230607-vcs6dsdb43
SHA256 af1bcd9ba9a15d74a8819dc87f8032d22c4f26b4b5d10577e6544fa9674c7fbd
MD5 3f67f05693ab5fa507ff7a163a92bdc3
SHA1 1bba95ee3541fb51e6bbe6d87d98cdcff19b3801
SHA512 085e99274ec677ea49efde5771a8c80ba5e555d25cf49e863dce2696fc24ffbc2bc58d616f817a56f4da70f346fd6ab7e6ffc4d87f4b2af5e0c3e884350f6216
SSDEEP 3072:0m2WUrTS6DOS+QZs+VtVNAdMbA4OTntsJKn/uVb0:vIS/S+QZ37N8MOTtsJ/
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.ultimatechennai.com
Port
587
Username
[email protected]
Password
ucs@2021
Email to
[email protected]

Targets

- Target
  af1bcd9ba9a15d74a8819dc87f8032d22c4f26b4b5d10577e6544fa9674c7fbd.exe
- Size 164KB
- SHA256 af1bcd9ba9a15d74a8819dc87f8032d22c4f26b4b5d10577e6544fa9674c7fbd
- MD5 3f67f05693ab5fa507ff7a163a92bdc3
- SHA1 1bba95ee3541fb51e6bbe6d87d98cdcff19b3801
- SHA512 085e99274ec677ea49efde5771a8c80ba5e555d25cf49e863dce2696fc24ffbc2bc58d616f817a56f4da70f346fd6ab7e6ffc4d87f4b2af5e0c3e884350f6216
- SSDEEP 3072:0m2WUrTS6DOS+QZs+VtVNAdMbA4OTntsJKn/uVb0:vIS/S+QZ37N8MOTtsJ/
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

2

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2