agenttesla

Sharing

Copy URL Twitter E-mail

General

Target
AnthemiaTemplate.zip
Size 156.0MB
Sample240529-mbp4caca52
SHA256 e385ea93225df4711d9872c0d948125606d7829e0a6bb05f687322f6cc2b1dcf
MD5 bd3e9a3d128940f806ea389377ac0005
SHA1 738ddca03746c1e3b85a92b2a2fa26b22935e9f4
SHA512 82cb11ec27dd03e8492049ef3e2b6ee6a3aad3b0d421f4e6858e60b962ecc8b48d8bf50e98129914eee667073164b738eee6fe57a5f9cd1edd8b6a51066e1c38
SSDEEP 3145728:5+qUZSm083F7qwTjEx+qUZSm8PmPKdOqmOA3/Yf6n/+e/8DCICukeHXYOXn1crj7:ar3FnkOPxNn3Ac/V0HkebcBPN
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  AnthemiaTemplate.zip
- Size 156.0MB
- SHA256 e385ea93225df4711d9872c0d948125606d7829e0a6bb05f687322f6cc2b1dcf
- MD5 bd3e9a3d128940f806ea389377ac0005
- SHA1 738ddca03746c1e3b85a92b2a2fa26b22935e9f4
- SHA512 82cb11ec27dd03e8492049ef3e2b6ee6a3aad3b0d421f4e6858e60b962ecc8b48d8bf50e98129914eee667073164b738eee6fe57a5f9cd1edd8b6a51066e1c38
- SSDEEP 3145728:5+qUZSm083F7qwTjEx+qUZSm8PmPKdOqmOA3/Yf6n/+e/8DCICukeHXYOXn1crj7:ar3FnkOPxNn3Ac/V0HkebcBPN
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  AnthemiaTemplate/AnthemiaTemplate/bin/Debug/Guna.UI2.dll
- Size 1.9MB
- SHA256 cf423a447e5c1dc8bc0b84ef005e2e942fa149ba4f9caf7e2f12f672cad55385
- MD5 a6c5c5d8f6a0e33f789c1c9c070a38d6
- SHA1 f36efdf71e737c78e83d8d284ba03b5d5aff95f1
- SHA512 fd679781213be3b7ec6a39b2dacb2b96c356d4276e8b23995f243cbda88f56e311f2933244f50e50a27c72d664b67bb337ab0053c5e83fd934bbb67d6576a124
- SSDEEP 24576:sdNsB5K6Piv+Xv45K/+GEg4f7bP1/Ud4hCC18Xow1Ajg/nsad4hTaV+jXlo0HQ/F:mLbe1Ajg/nsad4FaV+j
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  AnthemiaTemplate/AnthemiaTemplate/bin/Debug/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  AnthemiaTemplate/AnthemiaTemplate/bin/Debug/SharpMonoInjector.dll
- Size 22KB
- SHA256 29217632db48464afb84f163f6d389af525edb7e951384ff5ea91d91c932ee96
- MD5 d5f8ef2cdc4323ddd7845c9b90e4c6fd
- SHA1 fb40ced0fe0ba5bc83b0edc381c1c475ff773ff8
- SHA512 cd6efd9093b1b4ab867f0098e281655bd28af721f3a45efcfd9771174dc47dbc05e63e5d80e10296881facc7e100b834501c3bba4088e8bde3db6f88d9e27ad2
- SSDEEP 384:bNQjEDfKh78RjUV/wWWbSYNCi1ssza2Q6OgxMDfd/Wjp9zDqPD6eSFjgii/:JpqlwFmYNTxzepBW1nQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  AnthemiaTemplate/AnthemiaTemplate/bin/Debug/StealForOLK.dll
- Size 8.8MB
- SHA256 f8f8c1164717a5ecaac9df8b2a30990f4156521c1298543e76eae6d60bf48f5a
- MD5 13595d476ed81d7293c20fb3058717e2
- SHA1 3a7d6fad645e504b00afb5ff46a0f81970f8c5e7
- SHA512 b6bf0f20048724a70126b4f1a34a30c92a2ef62c8cd369d3381a5652178505c8ed7dc21fda0abcec83f777cabbce6145186ace690523a9d9fad9ba276556b0a0
- SSDEEP 196608:TfpnhwltgZ4IKj6xqH/zqeEXEAIdQMgrbcadFR57V:TfphYtytELc0AzMgc857V
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  AnthemiaTemplate/AnthemiaTemplate/bin/Debug/monosharp-auto inject.exe
- Size 18KB
- SHA256 e207a2e48b6f0ab5ae0e7064ccd79d4df46aec44b042aa8691b9185a6a4506eb
- MD5 f8533d06adf141654c15260b63f5203a
- SHA1 2a052d5900668291a10ab8d551397f19bcde9bd7
- SHA512 a8ff877973bee9123ad73ce15459e481119d67ff8d533704f66ecd68baa8e95e4b8c5bd76a91c7fa7eaa280bbade51be9f19b4995b69a77fc91c2003dd0e244d
- SSDEEP 384:NxpiJgL2RE2XsVp4XeVTUdrRW3c2Y/LAuq8hkD19uC0LXlcJs42w+5OVBfGnu:2QbFutK2DOuu
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral11 behavioral12
- Target
  AnthemiaTemplate/AnthemiaTemplate/bin/Debug/smi.exe
- Size 9KB
- SHA256 12237476dfd8719929253c316091079d37d7ee8c6f630020b2b0a9996b036764
- MD5 c0a17812234aae6cd4365c67ec39a842
- SHA1 0c141a692d0f67cc1c62dac14f303d4b1447187e
- SHA512 84452a8b7e70abf4d2131f7fc451589b5aede332360b3834537bff012394be4f9e289fc893064027869cbda9d53cfe7c7793228c3adc98552ed5e30a8e4e4cae
- SSDEEP 192:JFebesSStElZcSBJKU9XtP1F2zdJJxuCnx:rebesHElSU3NAJd
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/Form1.resx
- Size 6KB
- SHA256 6efd449e783a5633e5a381130669373079f5b3c8f8f3591a4907ced8fc00e245
- MD5 ab014449ae72c9188854f8dae92390d4
- SHA1 8daf28bc8e4dbb7bd6e0daaa0bf0534f6fe1069f
- SHA512 aee2129c091546c5de2eb8cfe4de1aeec902ca7b053ff7b9835407adeddea15c3d47f202155255fe534448515bd929a797728ce19a9d24fd5603ddc45126dc07
- SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahF/bawqbawd:KjrbLPxsLvASvKgwyahFjawIawd
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/Properties/Resources.Designer.cs
- Size 2KB
- SHA256 dd5b039e15d25d85f393394cba70830637a9b4d9b7f0aa08aea0426dabc756ca
- MD5 86d7fe8f3fcb2154f7b02e2df379fac9
- SHA1 b676ba5f3ba2b4e4697039d26f298cf5841beff9
- SHA512 a017eb614dfebeab26f101d1041d64264d3f5c83bc502d8b8e9939d15334facada120ee22992d232d449878671f6e5dbcf04fdd3827e5112ab53122973553644
- MD5 SHA1 SHA512
Score

1^/10
behavioral17 behavioral18
- Target
  AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/Properties/Resources.resx
- Size 5KB
- SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
- MD5 0cd8c971317d19bbed44757809bcb92b
- SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
- SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/bin/Debug/Guna.UI2.dll
- Size 1.9MB
- SHA256 cf423a447e5c1dc8bc0b84ef005e2e942fa149ba4f9caf7e2f12f672cad55385
- MD5 a6c5c5d8f6a0e33f789c1c9c070a38d6
- SHA1 f36efdf71e737c78e83d8d284ba03b5d5aff95f1
- SHA512 fd679781213be3b7ec6a39b2dacb2b96c356d4276e8b23995f243cbda88f56e311f2933244f50e50a27c72d664b67bb337ab0053c5e83fd934bbb67d6576a124
- SSDEEP 24576:sdNsB5K6Piv+Xv45K/+GEg4f7bP1/Ud4hCC18Xow1Ajg/nsad4hTaV+jXlo0HQ/F:mLbe1Ajg/nsad4FaV+j
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/bin/Debug/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/bin/Debug/monosharp-auto inject.exe
- Size 18KB
- SHA256 bf45d43703c3106f27cf9fbd890982e4e2c9e2dce78462c79401a7cd8b0c9520
- MD5 72d76f2388cc93a2b445fc050f6ea249
- SHA1 23f0a7f5692cae17044de67e910901ba23e56412
- SHA512 6e2f298d8d96880453c07658a6f57dbca56f11fcbd5f9783b6306a19360caf2c25bd08fe060e1f920c8cbe548d2981bbb054af30027c48ee558b299b24ab31d2
- SSDEEP 384:BxnMJgL2hEgXcBZ4XeVTQ5drRW3c2YlLiu08nMDX9uC0LXlcJs42Z+BOVBfcbu:WQl40utK2QOEu
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral25 behavioral26
- Target
  AnthemiaTemplate/MonoSharpAuto Inject/monosharp-auto inject/obj/Debug/monosharp-auto inject.exe
- Size 18KB
- SHA256 bf45d43703c3106f27cf9fbd890982e4e2c9e2dce78462c79401a7cd8b0c9520
- MD5 72d76f2388cc93a2b445fc050f6ea249
- SHA1 23f0a7f5692cae17044de67e910901ba23e56412
- SHA512 6e2f298d8d96880453c07658a6f57dbca56f11fcbd5f9783b6306a19360caf2c25bd08fe060e1f920c8cbe548d2981bbb054af30027c48ee558b299b24ab31d2
- SSDEEP 384:BxnMJgL2hEgXcBZ4XeVTQ5drRW3c2YlLiu08nMDX9uC0LXlcJs42Z+BOVBfcbu:WQl40utK2QOEu
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral27 behavioral28
- Target
  AnthemiaTemplate/MonoSharpAuto Inject/packages/Guna.UI2.WinForms.2.0.4.4/lib/net40/Guna.UI2.dll
- Size 1.9MB
- SHA256 9a04a6754021b1774f5b4af8462197b3114dab7a2de60f6766227a6a96cd5065
- MD5 9045f15d525c192d82b19eeadd66fba3
- SHA1 040181110aefa081d7c665c2be3b1c3b49fb302e
- SHA512 f900722f36203176880cacefb087d7ee29b96be19f6b4c4a6831cf1c2312d01a8d065c53051cf06ae8f52a32906903fe891b2533eda656d01ebfcfb1269a4729
- SSDEEP 24576:q5lxrKZ9DHFoXP/Jt/A1IKKPZDQJCJ9oDH0HQ/jzJ1RMIK24:cv/CIR4C8DtRMIK24
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  AnthemiaTemplate/MonoSharpAuto Inject/packages/Guna.UI2.WinForms.2.0.4.4/lib/net45/Guna.UI2.dll
- Size 1.9MB
- SHA256 9a04a6754021b1774f5b4af8462197b3114dab7a2de60f6766227a6a96cd5065
- MD5 9045f15d525c192d82b19eeadd66fba3
- SHA1 040181110aefa081d7c665c2be3b1c3b49fb302e
- SHA512 f900722f36203176880cacefb087d7ee29b96be19f6b4c4a6831cf1c2312d01a8d065c53051cf06ae8f52a32906903fe891b2533eda656d01ebfcfb1269a4729
- SSDEEP 24576:q5lxrKZ9DHFoXP/Jt/A1IKKPZDQJCJ9oDH0HQ/jzJ1RMIK24:cv/CIR4C8DtRMIK24
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

AgentTesla payload

AgentTesla

AgentTesla payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32