agenttesla | 6298049f6791a950bf25d9775ab12e3c86dc593b64f34341bc82e935b71603d4 | Triage

Sharing

General

Target

NerestPC.exe
Size

8.8MB
Sample

231013-qbqawshh7x
MD5

6da7355b67aa98c078ef32b75b594f30
SHA1

d0f6d3e1927c389454de8f1ee27de4215c31df25
SHA256

6298049f6791a950bf25d9775ab12e3c86dc593b64f34341bc82e935b71603d4
SHA512

79d67827f8f38156ef7ec89f20972eea61cbc88c0f90c0f7528d78d533c9ced94830293ed8943a53e251b89be6f1ac96993ae1fbb2cc24cd1e180215bcc97cc1
SSDEEP

196608:7MKTgZ3LM26a/+Qe26RJ4FeQSuvx4uUcwti7TQlje:7MygZ3grNQerRJ4FewXwtQQlj

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  NerestPC.exe
- Size
  
  8.8MB
- MD5
  
  6da7355b67aa98c078ef32b75b594f30
- SHA1
  
  d0f6d3e1927c389454de8f1ee27de4215c31df25
- SHA256
  
  6298049f6791a950bf25d9775ab12e3c86dc593b64f34341bc82e935b71603d4
- SHA512
  
  79d67827f8f38156ef7ec89f20972eea61cbc88c0f90c0f7528d78d533c9ced94830293ed8943a53e251b89be6f1ac96993ae1fbb2cc24cd1e180215bcc97cc1
- SSDEEP
  
  196608:7MKTgZ3LM26a/+Qe26RJ4FeQSuvx4uUcwti7TQlje:7MygZ3grNQerRJ4FewXwtQQlj
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan