agenttesla | e75faef67e38305f7267a344763668b80d31285d5558c6b4afb2dd5fed8b3ddd | Triage

Sharing

General

Target

e75faef67e38305f7267a344763668b80d31285d5558c6b4afb2dd5fed8b3ddd
Size

1.0MB
Sample

240430-ck1akahd66
MD5

e0ac2deedaac10bd391343a0bc6de31e
SHA1

c998258356e386efd1c97e6fa001156896d3b2da
SHA256

e75faef67e38305f7267a344763668b80d31285d5558c6b4afb2dd5fed8b3ddd
SHA512

aec963d8535608743f08a4ecef6f31fe66f70b33e32b974fa3f7fe6593e000d00b9a60634c6a10c1bf0bf736806ca6a9aeb681713f39ac5555560098fb2dc907
SSDEEP

24576:TAHnh+eWsN3skA4RV1Hom2KXMmHaWF7pVRQ5:eh+ZkldoPK8YaWZpVE

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.abanengineering.com
Port:
587
Username:
[email protected]
Password:
Shah@123
Email To:
[email protected]

Targets

- Target
  
  e75faef67e38305f7267a344763668b80d31285d5558c6b4afb2dd5fed8b3ddd
- Size
  
  1.0MB
- MD5
  
  e0ac2deedaac10bd391343a0bc6de31e
- SHA1
  
  c998258356e386efd1c97e6fa001156896d3b2da
- SHA256
  
  e75faef67e38305f7267a344763668b80d31285d5558c6b4afb2dd5fed8b3ddd
- SHA512
  
  aec963d8535608743f08a4ecef6f31fe66f70b33e32b974fa3f7fe6593e000d00b9a60634c6a10c1bf0bf736806ca6a9aeb681713f39ac5555560098fb2dc907
- SSDEEP
  
  24576:TAHnh+eWsN3skA4RV1Hom2KXMmHaWF7pVRQ5:eh+ZkldoPK8YaWZpVE
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan