agenttesla | e1e2efb1c4ca047cdc08cd33831f0b466eac9d25c479a7a435aef672726efb8f | Triage

Sharing

General

Target

StealLoaderSIAL.exe
Size

25.0MB
Sample

240307-gfhxyaeg82
MD5

d0df1b4b1807afe39497ccdad8acd48b
SHA1

be392a0e771803b0ac8cec4060ca35c481431bcc
SHA256

e1e2efb1c4ca047cdc08cd33831f0b466eac9d25c479a7a435aef672726efb8f
SHA512

05cc5c97db77eb5e004ad2a7c82b06c6dbffc83c36829a55ea2cddc722475acb17ebfaf3c7acc976fd6ea4c9410893f5222186f4680a2085e33c615816d89365
SSDEEP

393216:AtpjoQb6pkFGB51P2Bb1ksn7O3x33ftDt5TG08:AfcDpeGibxn7OVv53h8

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  StealLoaderSIAL.exe
- Size
  
  25.0MB
- MD5
  
  d0df1b4b1807afe39497ccdad8acd48b
- SHA1
  
  be392a0e771803b0ac8cec4060ca35c481431bcc
- SHA256
  
  e1e2efb1c4ca047cdc08cd33831f0b466eac9d25c479a7a435aef672726efb8f
- SHA512
  
  05cc5c97db77eb5e004ad2a7c82b06c6dbffc83c36829a55ea2cddc722475acb17ebfaf3c7acc976fd6ea4c9410893f5222186f4680a2085e33c615816d89365
- SSDEEP
  
  393216:AtpjoQb6pkFGB51P2Bb1ksn7O3x33ftDt5TG08:AfcDpeGibxn7OVv53h8
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan