agenttesla | 2cc4d41f8b7fc21975aaa14f1ecd5e0efd31c1e4907bf4dae3385c0c0b236f7e | Triage

Sharing

General

Target

2cc4d41f8b7fc21975aaa14f1ecd5e0efd31c1e4907bf4dae3385c0c0b236f7e
Size

7.0MB
Sample

240327-xa7xwadb4z
MD5

7a7eb29580834809765e39c167fada6e
SHA1

6eef5207ad83d182b0b68d422c321390a745e9c3
SHA256

2cc4d41f8b7fc21975aaa14f1ecd5e0efd31c1e4907bf4dae3385c0c0b236f7e
SHA512

810bca5571cc7af98da2f57724606f6bc9b6e1c03f6be3c39f7541959e7c286bd01fb50f8f4dacc7f54488ae46069e3fc853efd18dd8694a2ba83c22e85aa19c
SSDEEP

196608:vdleUleUlecLErUpzxHuyD8+8jBHY6x2:vjErwOUiBX

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  2cc4d41f8b7fc21975aaa14f1ecd5e0efd31c1e4907bf4dae3385c0c0b236f7e
- Size
  
  7.0MB
- MD5
  
  7a7eb29580834809765e39c167fada6e
- SHA1
  
  6eef5207ad83d182b0b68d422c321390a745e9c3
- SHA256
  
  2cc4d41f8b7fc21975aaa14f1ecd5e0efd31c1e4907bf4dae3385c0c0b236f7e
- SHA512
  
  810bca5571cc7af98da2f57724606f6bc9b6e1c03f6be3c39f7541959e7c286bd01fb50f8f4dacc7f54488ae46069e3fc853efd18dd8694a2ba83c22e85aa19c
- SSDEEP
  
  196608:vdleUleUlecLErUpzxHuyD8+8jBHY6x2:vjErwOUiBX
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan