agenttesla | f6e3e889073be19f8e24e1168d83c478214ac5b82169324e73740cae806b25ba | Triage

Submit
Reports

Overview

overview

Static

static

3

e15b429161...96.exe

windows7-x64

e15b429161...96.exe

windows10-2004-x64

Sharing

General

Target

e15b4291610eea4c4694bdc771926b96
Size

1.4MB
Sample

240327-lmax5ahd53
MD5

e15b4291610eea4c4694bdc771926b96
SHA1

94954bf4feb1e5833706b9cf92a33750dfaa54ae
SHA256

f6e3e889073be19f8e24e1168d83c478214ac5b82169324e73740cae806b25ba
SHA512

e9440647aa7e88eeea46987ddb8c5da583319abef4d061cbca02a0575c568c37487d223c5c98f293752a02af3d870748fada720d755d7f0f0cc5ee683b8776a9
SSDEEP

24576:KEzDbW5oaXpcB7mVSaccPuvcd5OGQT/1/0nS+7n4SYwqK4zf3RTsAHWAgqChJ+hr:fyiec6Yi+Bm75xXxMNQuiNB/e

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e15b4291610eea4c4694bdc771926b96.exe

Resource

win7-20240221-en

agenttesla keylogger spyware stealer trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

e15b4291610eea4c4694bdc771926b96.exe

Resource

win10v2004-20240226-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.ccsp-india.com
Port:
587
Username:
[email protected]
Password:
Lkp$CcsP1008
Email To:
[email protected]

Targets

- Target
  
  e15b4291610eea4c4694bdc771926b96
- Size
  
  1.4MB
- MD5
  
  e15b4291610eea4c4694bdc771926b96
- SHA1
  
  94954bf4feb1e5833706b9cf92a33750dfaa54ae
- SHA256
  
  f6e3e889073be19f8e24e1168d83c478214ac5b82169324e73740cae806b25ba
- SHA512
  
  e9440647aa7e88eeea46987ddb8c5da583319abef4d061cbca02a0575c568c37487d223c5c98f293752a02af3d870748fada720d755d7f0f0cc5ee683b8776a9
- SSDEEP
  
  24576:KEzDbW5oaXpcB7mVSaccPuvcd5OGQT/1/0nS+7n4SYwqK4zf3RTsAHWAgqChJ+hr:fyiec6Yi+Bm75xXxMNQuiNB/e
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy