agenttesla | 1429363a609282393015df73bb88aea33d19637a0abb82982d1050e56e1b4481 | Triage

Submit
Reports

Overview

overview

Static

static

3

1429363a60...81.exe

windows7-x64

1

1429363a60...81.exe

windows10-2004-x64

Sharing

General

Target

1429363a609282393015df73bb88aea33d19637a0abb82982d1050e56e1b4481
Size

997KB
Sample

240426-cwlxbahc86
MD5

c72150696ac13ac1a2dc8b492c0d5ca3
SHA1

ff72cd015ebfe11c15f331122103fb78c5ad118c
SHA256

1429363a609282393015df73bb88aea33d19637a0abb82982d1050e56e1b4481
SHA512

505dd2c31c2f4e08330239d1a7c4357df8fd1c8aa66a50b5a4e91162b7c800caefb56eef69aa6c66955382a91fcb2997f269eaf280826e647a9491a2f9741c1f
SSDEEP

24576:gsP3GbkmtYXd/f9j91ir4hpKyO7YL3qiA8b2ab6WzXQ9DwYE:gf2Xrj9Qru/kaqFabBQ9sb

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1429363a609282393015df73bb88aea33d19637a0abb82982d1050e56e1b4481.exe

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

1429363a609282393015df73bb88aea33d19637a0abb82982d1050e56e1b4481.exe

Resource

win10v2004-20240412-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot7017233680:AAEfWTUjfiK5hxLLRkmgitv57SQZuFap4nQ/

Targets

- Target
  
  1429363a609282393015df73bb88aea33d19637a0abb82982d1050e56e1b4481
- Size
  
  997KB
- MD5
  
  c72150696ac13ac1a2dc8b492c0d5ca3
- SHA1
  
  ff72cd015ebfe11c15f331122103fb78c5ad118c
- SHA256
  
  1429363a609282393015df73bb88aea33d19637a0abb82982d1050e56e1b4481
- SHA512
  
  505dd2c31c2f4e08330239d1a7c4357df8fd1c8aa66a50b5a4e91162b7c800caefb56eef69aa6c66955382a91fcb2997f269eaf280826e647a9491a2f9741c1f
- SSDEEP
  
  24576:gsP3GbkmtYXd/f9j91ir4hpKyO7YL3qiA8b2ab6WzXQ9DwYE:gf2Xrj9Qru/kaqFabBQ9sb
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy