agenttesla | 92aff680ae646607e5d30fd43bfb66d8d765b7bcf7ffc0aacb65c389358fc528 | Triage

Sharing

General

Target

92aff680ae646607e5d30fd43bfb66d8d765b7bcf7ffc0aacb65c389358fc528.exe
Size

832KB
Sample

240523-r7a2hseh3z
MD5

719d1025c292bfee9c1df6903bb1c3ac
SHA1

d23fe682c242dff7446d9661cb6045e742666ebc
SHA256

92aff680ae646607e5d30fd43bfb66d8d765b7bcf7ffc0aacb65c389358fc528
SHA512

1d64abb7b77ed94c8d63a0dddf00b5b00b108ee20c320a8263e83d9bc23013bfeb1e3dbb03b171e3beee03b16111fc9349de2380943d5d960a67f55b94cbb1c1
SSDEEP

24576:EeWtb3BErWwO8+LXvon7qikP22ctGhJHfAAb/F:ENZBErO8+sn1J2sG/HfAAb/F

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
emidco.com
Port:
587
Username:
[email protected]
Password:
DMmpPxx9c
Email To:
[email protected]

Targets

- Target
  
  92aff680ae646607e5d30fd43bfb66d8d765b7bcf7ffc0aacb65c389358fc528.exe
- Size
  
  832KB
- MD5
  
  719d1025c292bfee9c1df6903bb1c3ac
- SHA1
  
  d23fe682c242dff7446d9661cb6045e742666ebc
- SHA256
  
  92aff680ae646607e5d30fd43bfb66d8d765b7bcf7ffc0aacb65c389358fc528
- SHA512
  
  1d64abb7b77ed94c8d63a0dddf00b5b00b108ee20c320a8263e83d9bc23013bfeb1e3dbb03b171e3beee03b16111fc9349de2380943d5d960a67f55b94cbb1c1
- SSDEEP
  
  24576:EeWtb3BErWwO8+LXvon7qikP22ctGhJHfAAb/F:ENZBErO8+sn1J2sG/HfAAb/F
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan