agenttesla | df61a771943e36687b9b9081f002dcdad6cf80dc9a2b44f43d1e7f95b307a997 | Triage

Sharing

General

Target

HwidSpoofer.comv22.exe
Size

3.1MB
Sample

240727-cccjjazbrl
MD5

d5db54ad2a85ea36372de031787f0aba
SHA1

16f79a5f219d38a2c1fe092e071029de5073e070
SHA256

df61a771943e36687b9b9081f002dcdad6cf80dc9a2b44f43d1e7f95b307a997
SHA512

af6336c054ef04c5acd7b179f941f3489c5ade0af90ae3ab7f1c806a6992c4efa0e06a534f54863ddffadf77f36944f3064b81754cc841994e530438c344308c
SSDEEP

98304:F04Zo07xa9g7xa9N7xa9o7xa9T7xa9Nppppp0vkESY6SXvyQ:hI9r9e9D9A9gnB6SD

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  HwidSpoofer.comv22.exe
- Size
  
  3.1MB
- MD5
  
  d5db54ad2a85ea36372de031787f0aba
- SHA1
  
  16f79a5f219d38a2c1fe092e071029de5073e070
- SHA256
  
  df61a771943e36687b9b9081f002dcdad6cf80dc9a2b44f43d1e7f95b307a997
- SHA512
  
  af6336c054ef04c5acd7b179f941f3489c5ade0af90ae3ab7f1c806a6992c4efa0e06a534f54863ddffadf77f36944f3064b81754cc841994e530438c344308c
- SSDEEP
  
  98304:F04Zo07xa9g7xa9N7xa9o7xa9T7xa9Nppppp0vkESY6SXvyQ:hI9r9e9D9A9gnB6SD
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan