agenttesla | b50565bf09e5dacbab8707a725376464874b24e86f38e977c4a45de1049c9c62 | Triage

Sharing

General

Target

b50565bf09e5dacbab8707a725376464874b24e86f38e977c4a45de1049c9c62
Size

12KB
Sample

231208-cphlbaaa3z
MD5

993da48540a2412e8db984b790944f34
SHA1

f4c946466fd439ebedd8c045909674e76f765f29
SHA256

b50565bf09e5dacbab8707a725376464874b24e86f38e977c4a45de1049c9c62
SHA512

8788077de9a8fd932e11bb11581ee7b1ee3040b930408f641449f29d271ca1b1769497f1c07148873c1ab3e2eeda652fcafe26eef8f9b2f41c672206b216f1f9
SSDEEP

192:fdQ8+pGrmjALBBhaqFYw55bGTzK5jX92PxcZ:fO8YKmjSxFv5JQzKJX9r

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.jaazgroup.com
Port:
587
Username:
[email protected]
Password:
cincin/123
Email To:
[email protected]

Targets

- Target
  
  b50565bf09e5dacbab8707a725376464874b24e86f38e977c4a45de1049c9c62
- Size
  
  12KB
- MD5
  
  993da48540a2412e8db984b790944f34
- SHA1
  
  f4c946466fd439ebedd8c045909674e76f765f29
- SHA256
  
  b50565bf09e5dacbab8707a725376464874b24e86f38e977c4a45de1049c9c62
- SHA512
  
  8788077de9a8fd932e11bb11581ee7b1ee3040b930408f641449f29d271ca1b1769497f1c07148873c1ab3e2eeda652fcafe26eef8f9b2f41c672206b216f1f9
- SSDEEP
  
  192:fdQ8+pGrmjALBBhaqFYw55bGTzK5jX92PxcZ:fO8YKmjSxFv5JQzKJX9r
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan