agenttesla | 247c2d4a4f3d90a0635b2c168b361b6b506e6fdd0f19fef1f69b089a71f3f59e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abdispoofer.exe
Size

4.9MB
Sample

240817-bz9l4sshqp
MD5

e6668af99f1078b03125d0d05ee0ea16
SHA1

8a63e74aceee47864ec8018eb30bab4911e6fa64
SHA256

247c2d4a4f3d90a0635b2c168b361b6b506e6fdd0f19fef1f69b089a71f3f59e
SHA512

3adfc15e11bee613d06f2f02655590bbc00fb04908c7df78c6e935ca2118eff94ce6034fa33b16bb6b1690fdbda9f8f02836ea97f504f85f8e4559748117aa97
SSDEEP

98304:QzWg2zCdPaQEd51GWRwDGpRIRmrHvkESY6SXvyQJkqXf0F7F:E52YyQEdOWyGpGGnB6SDJkSI

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  abdispoofer.exe
- Size
  
  4.9MB
- MD5
  
  e6668af99f1078b03125d0d05ee0ea16
- SHA1
  
  8a63e74aceee47864ec8018eb30bab4911e6fa64
- SHA256
  
  247c2d4a4f3d90a0635b2c168b361b6b506e6fdd0f19fef1f69b089a71f3f59e
- SHA512
  
  3adfc15e11bee613d06f2f02655590bbc00fb04908c7df78c6e935ca2118eff94ce6034fa33b16bb6b1690fdbda9f8f02836ea97f504f85f8e4559748117aa97
- SSDEEP
  
  98304:QzWg2zCdPaQEd51GWRwDGpRIRmrHvkESY6SXvyQJkqXf0F7F:E52YyQEdOWyGpGGnB6SDJkSI
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan