agenttesla | 599847ba9bfa6ee2f977a8a23bfb18dea0a1e52bda46d9550601d2dead7816ee | Triage

Sharing

General

Target

599847ba9bfa6ee2f977a8a23bfb18dea0a1e52bda46d9550601d2dead7816ee
Size

1.1MB
Sample

240524-sdtgfaaa31
MD5

2a91bb35e6e7aa93987d2d5ded713e7a
SHA1

4e8ad6c1f4d53253fe749560a53ef2f12b2092aa
SHA256

599847ba9bfa6ee2f977a8a23bfb18dea0a1e52bda46d9550601d2dead7816ee
SHA512

c4a442d2992c6e884c432151843f84f7b69482198e141b462e0f1f621e0fd8c9511bf203d74a3f6f8bf757d133d24f4c849b67f572d8d5c2b03b7ff491fd14e5
SSDEEP

24576:KfCW/QTcdOBw2MTQcPTAcySiDNpfVkqgfPyU8/oa8reuaDWT+q:S9/QTNw2070nS4pfVkqgy6r3aq

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  599847ba9bfa6ee2f977a8a23bfb18dea0a1e52bda46d9550601d2dead7816ee
- Size
  
  1.1MB
- MD5
  
  2a91bb35e6e7aa93987d2d5ded713e7a
- SHA1
  
  4e8ad6c1f4d53253fe749560a53ef2f12b2092aa
- SHA256
  
  599847ba9bfa6ee2f977a8a23bfb18dea0a1e52bda46d9550601d2dead7816ee
- SHA512
  
  c4a442d2992c6e884c432151843f84f7b69482198e141b462e0f1f621e0fd8c9511bf203d74a3f6f8bf757d133d24f4c849b67f572d8d5c2b03b7ff491fd14e5
- SSDEEP
  
  24576:KfCW/QTcdOBw2MTQcPTAcySiDNpfVkqgfPyU8/oa8reuaDWT+q:S9/QTNw2070nS4pfVkqgy6r3aq
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan