agenttesla | e1e2efb1c4ca047cdc08cd33831f0b466eac9d25c479a7a435aef672726efb8f | Triage

Sharing

General

Target

StealLoaderSIAL.exe
Size

25.0MB
Sample

240328-n5gjqsbh41
MD5

d0df1b4b1807afe39497ccdad8acd48b
SHA1

be392a0e771803b0ac8cec4060ca35c481431bcc
SHA256

e1e2efb1c4ca047cdc08cd33831f0b466eac9d25c479a7a435aef672726efb8f
SHA512

05cc5c97db77eb5e004ad2a7c82b06c6dbffc83c36829a55ea2cddc722475acb17ebfaf3c7acc976fd6ea4c9410893f5222186f4680a2085e33c615816d89365
SSDEEP

393216:AtpjoQb6pkFGB51P2Bb1ksn7O3x33ftDt5TG08:AfcDpeGibxn7OVv53h8

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  StealLoaderSIAL.exe
- Size
  
  25.0MB
- MD5
  
  d0df1b4b1807afe39497ccdad8acd48b
- SHA1
  
  be392a0e771803b0ac8cec4060ca35c481431bcc
- SHA256
  
  e1e2efb1c4ca047cdc08cd33831f0b466eac9d25c479a7a435aef672726efb8f
- SHA512
  
  05cc5c97db77eb5e004ad2a7c82b06c6dbffc83c36829a55ea2cddc722475acb17ebfaf3c7acc976fd6ea4c9410893f5222186f4680a2085e33c615816d89365
- SSDEEP
  
  393216:AtpjoQb6pkFGB51P2Bb1ksn7O3x33ftDt5TG08:AfcDpeGibxn7OVv53h8
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan