agenttesla | 17e11d18b340e970ea2e332046eb7ee4469ad1dd463a86743900f651d4be75b0 | Triage

Sharing

General

Target

yjrr1b.rar
Size

1.8MB
Sample

240726-qmskdszfrj
MD5

9452a27a58ff2e8d3370cd8b08ef928e
SHA1

c6aefca99b0ee883ce83ce3aa591e6b938f84cbf
SHA256

17e11d18b340e970ea2e332046eb7ee4469ad1dd463a86743900f651d4be75b0
SHA512

2343100962412892d559523418902ef9a80647324e7587da721dc63178ba81157bdaad02716ac26c66459a9130f68a4d401894d881070c100219919432f2f1fc
SSDEEP

49152:P3El7Lk9OtLMO1nkcn4ToZXmYwy9D+UXl385hOAq9Ei:PO7L6OSO1H4edwy9/Xl385hON/

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  HwidSpoofer.comv22.exe
- Size
  
  3.1MB
- MD5
  
  d5db54ad2a85ea36372de031787f0aba
- SHA1
  
  16f79a5f219d38a2c1fe092e071029de5073e070
- SHA256
  
  df61a771943e36687b9b9081f002dcdad6cf80dc9a2b44f43d1e7f95b307a997
- SHA512
  
  af6336c054ef04c5acd7b179f941f3489c5ade0af90ae3ab7f1c806a6992c4efa0e06a534f54863ddffadf77f36944f3064b81754cc841994e530438c344308c
- SSDEEP
  
  98304:F04Zo07xa9g7xa9N7xa9o7xa9T7xa9Nppppp0vkESY6SXvyQ:hI9r9e9D9A9gnB6SD
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan