agenttesla | 0469f50854f0dde4fe6c3f21ce5718f8fce4d93b7c7f5c3d87a3be63cf8c8ca4 | Triage

Sharing

General

Target

3d0cf751fb32bf70ed4f71aabebb3510_NeikiAnalytics.exe
Size

1.6MB
Sample

240522-z24ewagh6s
MD5

3d0cf751fb32bf70ed4f71aabebb3510
SHA1

9cb2daa219930db66e9fbc0fdbd163b9ea530176
SHA256

0469f50854f0dde4fe6c3f21ce5718f8fce4d93b7c7f5c3d87a3be63cf8c8ca4
SHA512

00f5087887146714b6d0e4c7db9eafe272acf590046a2ddba359c4cebda16ce8b64ec88095bdb5887e16546af9df255a30f9da1fc16862884638b75d5b23ad1b
SSDEEP

49152:rjxgaz5WITYbNbNWo4kSH3OqtwIDYaRQ:HCazgIT4bNJFY3Oqt3Ye

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  3d0cf751fb32bf70ed4f71aabebb3510_NeikiAnalytics.exe
- Size
  
  1.6MB
- MD5
  
  3d0cf751fb32bf70ed4f71aabebb3510
- SHA1
  
  9cb2daa219930db66e9fbc0fdbd163b9ea530176
- SHA256
  
  0469f50854f0dde4fe6c3f21ce5718f8fce4d93b7c7f5c3d87a3be63cf8c8ca4
- SHA512
  
  00f5087887146714b6d0e4c7db9eafe272acf590046a2ddba359c4cebda16ce8b64ec88095bdb5887e16546af9df255a30f9da1fc16862884638b75d5b23ad1b
- SSDEEP
  
  49152:rjxgaz5WITYbNbNWo4kSH3OqtwIDYaRQ:HCazgIT4bNJFY3Oqt3Ye
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan