agenttesla | 217730f09340ec30923999cae95c9fbbef58334ef7b6098be0eed91d0ec072e5 | Triage

Sharing

General

Target

comet.exe
Size

1.2MB
Sample

240522-wf796aba55
MD5

216ced1cd41a60265b9776dee1ce0d90
SHA1

ae4b2642b0c529495106ec4ba8eb5ecde91ed7ca
SHA256

217730f09340ec30923999cae95c9fbbef58334ef7b6098be0eed91d0ec072e5
SHA512

90bb688ec769e191514ec8b0b0d00a8feacdcf667344e89ead0a0200bc2636846c3e2c4f343fff07e3be2ecf632c0bcc216306b49a0b4847b138395dfafbda78
SSDEEP

24576:kO3aNJjDBAOySeTQcPTAcySiDNpfVkqgfPyU8/oa8reuaDS3c:OJjDaOyN70nS4pfVkqgy6r3aG

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  comet.exe
- Size
  
  1.2MB
- MD5
  
  216ced1cd41a60265b9776dee1ce0d90
- SHA1
  
  ae4b2642b0c529495106ec4ba8eb5ecde91ed7ca
- SHA256
  
  217730f09340ec30923999cae95c9fbbef58334ef7b6098be0eed91d0ec072e5
- SHA512
  
  90bb688ec769e191514ec8b0b0d00a8feacdcf667344e89ead0a0200bc2636846c3e2c4f343fff07e3be2ecf632c0bcc216306b49a0b4847b138395dfafbda78
- SSDEEP
  
  24576:kO3aNJjDBAOySeTQcPTAcySiDNpfVkqgfPyU8/oa8reuaDS3c:OJjDaOyN70nS4pfVkqgy6r3aG
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan