agenttesla | d27c7cb819083f9737f921ee129a7d3176e6d91f58a1e4e17c5a2c2c8de6a3b2 | Triage

Sharing

General

Target

d27c7cb819083f9737f921ee129a7d3176e6d91f58a1e4e17c5a2c2c8de6a3b2
Size

1007KB
Sample

240430-bq72xsgf3x
MD5

415f2625a06149e4faa269e6c939ddf4
SHA1

046c676975c09191c4031a876bd5ed506b4cf513
SHA256

d27c7cb819083f9737f921ee129a7d3176e6d91f58a1e4e17c5a2c2c8de6a3b2
SHA512

75fc0f277ecb2af0f1c5796f6f95e88379538717863716adb11206240461280fad64269334aaf8ac2cf0828394e9f39e4b5d5161ac1995dac7bbcdbf49402179
SSDEEP

24576:JAHnh+eWsN3skA4RV1Hom2KXMmHaAv5PJCfN+b5:Qh+ZkldoPK8YaABsNi

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.abanengineering.com
Port:
587
Username:
[email protected]
Password:
Shah@123
Email To:
[email protected]

Targets

- Target
  
  d27c7cb819083f9737f921ee129a7d3176e6d91f58a1e4e17c5a2c2c8de6a3b2
- Size
  
  1007KB
- MD5
  
  415f2625a06149e4faa269e6c939ddf4
- SHA1
  
  046c676975c09191c4031a876bd5ed506b4cf513
- SHA256
  
  d27c7cb819083f9737f921ee129a7d3176e6d91f58a1e4e17c5a2c2c8de6a3b2
- SHA512
  
  75fc0f277ecb2af0f1c5796f6f95e88379538717863716adb11206240461280fad64269334aaf8ac2cf0828394e9f39e4b5d5161ac1995dac7bbcdbf49402179
- SSDEEP
  
  24576:JAHnh+eWsN3skA4RV1Hom2KXMmHaAv5PJCfN+b5:Qh+ZkldoPK8YaABsNi
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2