agenttesla | a37430b286677bba2a12254179ffca2322d36d4187508b11fec9d1a0d3cddd9e | Triage

Sharing

General

Target

Reflex.exe
Size

1.8MB
Sample

240829-lf4a4awgpj
MD5

06484bfa388d9f2135e5f15e702e02de
SHA1

44d655f3288a3e3f51f49e4cd1c7f46f39bdb07b
SHA256

a37430b286677bba2a12254179ffca2322d36d4187508b11fec9d1a0d3cddd9e
SHA512

5b706a8760ade159c058298284428846caec945f8d54dce41cffbc1616d74e95ebca59aec149b4ce9148e491781ea89a58bf2445c284f13a18da00b0cc25780f
SSDEEP

24576:W1RVOmZc0vDeij3KBHSMmITMvRFhRRbNWoCfkYSEH3OqtwIuX/1d:2RVOXfi03mITYbNbNWo4kSH3OqtwIU

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  Reflex.exe
- Size
  
  1.8MB
- MD5
  
  06484bfa388d9f2135e5f15e702e02de
- SHA1
  
  44d655f3288a3e3f51f49e4cd1c7f46f39bdb07b
- SHA256
  
  a37430b286677bba2a12254179ffca2322d36d4187508b11fec9d1a0d3cddd9e
- SHA512
  
  5b706a8760ade159c058298284428846caec945f8d54dce41cffbc1616d74e95ebca59aec149b4ce9148e491781ea89a58bf2445c284f13a18da00b0cc25780f
- SSDEEP
  
  24576:W1RVOmZc0vDeij3KBHSMmITMvRFhRRbNWoCfkYSEH3OqtwIuX/1d:2RVOXfi03mITYbNbNWo4kSH3OqtwIU
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan