agenttesla | 8252ddb53b8b6564cb236c1693f8a9695ab9e48a90b3904a2bf7a34881e4c1f0 | Triage

Submit
Reports

Overview

overview

Static

static

3

5ff5051e54...cs.exe

windows7-x64

5ff5051e54...cs.exe

windows10-2004-x64

Sharing

General

Target

5ff5051e549747f6bedd8bee29406760_NeikiAnalytics
Size

4.2MB
Sample

240510-yn2hpahg28
MD5

5ff5051e549747f6bedd8bee29406760
SHA1

a374166aaccbda485409926218cd2a98dfb35fc1
SHA256

8252ddb53b8b6564cb236c1693f8a9695ab9e48a90b3904a2bf7a34881e4c1f0
SHA512

fe28e001e44e67fc0b21edee572a9bcfa32f4eb91e29fb1d426281dc42f2c230d7c8a80693542502d9817df629547ca428257f08b45dfd70615715012a55026f
SSDEEP

98304:jd9IRzKP2vgMnK+lVsoVippEcnMR545balCTDAYPXbCz6pM:8RzYVMzVsppS89aH6LoKM

Score

10^/10

agenttesla elysiumstealer keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5ff5051e549747f6bedd8bee29406760_NeikiAnalytics.exe

Resource

win7-20240220-en

elysiumstealer stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

5ff5051e549747f6bedd8bee29406760_NeikiAnalytics.exe

Resource

win10v2004-20240508-en

agenttesla elysiumstealer keylogger spyware stealer trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  5ff5051e549747f6bedd8bee29406760_NeikiAnalytics
- Size
  
  4.2MB
- MD5
  
  5ff5051e549747f6bedd8bee29406760
- SHA1
  
  a374166aaccbda485409926218cd2a98dfb35fc1
- SHA256
  
  8252ddb53b8b6564cb236c1693f8a9695ab9e48a90b3904a2bf7a34881e4c1f0
- SHA512
  
  fe28e001e44e67fc0b21edee572a9bcfa32f4eb91e29fb1d426281dc42f2c230d7c8a80693542502d9817df629547ca428257f08b45dfd70615715012a55026f
- SSDEEP
  
  98304:jd9IRzKP2vgMnK+lVsoVippEcnMR545balCTDAYPXbCz6pM:8RzYVMzVsppS89aH6LoKM
Score

10^/10

elysiumstealer stealer agenttesla keylogger spyware trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- ElysiumStealer
  ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.
  stealer elysiumstealer
- ElysiumStealer Support DLL
- AgentTesla payload
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

elysiumstealerstealer

behavioral2

agentteslaelysiumstealerkeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy