agenttesla | 2d310d80e32cf06ccf6cc5e63e542283bc9a301a31215030733a1f733b0d2346 | Triage

Submit
Reports

Overview

overview

Static

static

3

1649e10c12...83.exe

windows7-x64

1649e10c12...83.exe

windows10-2004-x64

Sharing

General

Target

1649e10c12e3b6242ac80048b6623683
Size

1.4MB
Sample

231230-msvp6abfhp
MD5

1649e10c12e3b6242ac80048b6623683
SHA1

14a200da1c85b80e688673fcc26f4ac21cf9a6fe
SHA256

2d310d80e32cf06ccf6cc5e63e542283bc9a301a31215030733a1f733b0d2346
SHA512

db5905abd5caf3027d06b513cc3b590a27b090817b0e3deae03abb1f51778481cdf724e202a02f39a12847c72fb3e907aa074de74a00d1130a93f2a19677fb92
SSDEEP

24576:adOTNGD7beQ6fsJcPvKVdtNFS/E+FH/T2fXO:0qU9uknSL/T2/

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1649e10c12e3b6242ac80048b6623683.exe

Resource

win7-20231215-en

agenttesla keylogger spyware stealer trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

1649e10c12e3b6242ac80048b6623683.exe

Resource

win10v2004-20231215-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1775909572:AAGbTnqPuJBAUZrgQhid9SmcxSSNElS3rh8/sendDocument

Targets

- Target
  
  1649e10c12e3b6242ac80048b6623683
- Size
  
  1.4MB
- MD5
  
  1649e10c12e3b6242ac80048b6623683
- SHA1
  
  14a200da1c85b80e688673fcc26f4ac21cf9a6fe
- SHA256
  
  2d310d80e32cf06ccf6cc5e63e542283bc9a301a31215030733a1f733b0d2346
- SHA512
  
  db5905abd5caf3027d06b513cc3b590a27b090817b0e3deae03abb1f51778481cdf724e202a02f39a12847c72fb3e907aa074de74a00d1130a93f2a19677fb92
- SSDEEP
  
  24576:adOTNGD7beQ6fsJcPvKVdtNFS/E+FH/T2fXO:0qU9uknSL/T2/
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy