agenttesla | 66c652dcc4d3d35af109565c5b90e02fcf21e382e3562ddf044a03b6f8119cf7 | Triage

Sharing

General

Target

66c652dcc4d3d35af109565c5b90e02fcf21e382e3562ddf044a03b6f8119cf7
Size

692KB
Sample

240430-bzgw4age44
MD5

9b49514378fdcef408f64c92acf3ade4
SHA1

434bb40d4486c2086b7fbecf308ae8a0afb5779d
SHA256

66c652dcc4d3d35af109565c5b90e02fcf21e382e3562ddf044a03b6f8119cf7
SHA512

98162ae8c784f27e76b6954227bd69873e03b1e1d9d007e47770e9e59c365eb7a54fbde5d97fe5810c0a91f8c4c2af91df3396db59ecfea72d5268df6a556443
SSDEEP

12288:3+Dbg/B778QeLz2Y58Iocl2xBTtqeJGl4gI9KgVEIUUSH8UwrdS+sM92:Gg/BY2hJclKBMmKgWQQ8UwIlM

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.atlantegypt.com
Port:
587
Username:
[email protected]
Password:
OL11121314ol
Email To:
[email protected]

Targets

- Target
  
  66c652dcc4d3d35af109565c5b90e02fcf21e382e3562ddf044a03b6f8119cf7
- Size
  
  692KB
- MD5
  
  9b49514378fdcef408f64c92acf3ade4
- SHA1
  
  434bb40d4486c2086b7fbecf308ae8a0afb5779d
- SHA256
  
  66c652dcc4d3d35af109565c5b90e02fcf21e382e3562ddf044a03b6f8119cf7
- SHA512
  
  98162ae8c784f27e76b6954227bd69873e03b1e1d9d007e47770e9e59c365eb7a54fbde5d97fe5810c0a91f8c4c2af91df3396db59ecfea72d5268df6a556443
- SSDEEP
  
  12288:3+Dbg/B778QeLz2Y58Iocl2xBTtqeJGl4gI9KgVEIUUSH8UwrdS+sM92:Gg/BY2hJclKBMmKgWQQ8UwIlM
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan