agenttesla

Resubmissions

29/08/2024, 10:59

240829-m3m33axfpg 10

29/08/2024, 05:47

240829-ggvm5awfld 10

Sharing

Copy URL

Twitter E-mail

General

Target

minecraft xray.zip
Size

148.6MB
Sample

240829-m3m33axfpg
MD5

518933d7819991785b536632a774a2d9
SHA1

5a7b287de15c2b01acacf951de8810fe91e73000
SHA256

9955498358d9923d8765937fc7306061d98732e61c52117340d990759228e57f
SHA512

4dc9c3ecbfa641b8cc5e92700120b174922dfdb3b297a6e99aeb8bc7a3234a34fb82fb5ce8d803267f7c7e19500aafe488e3ae9ac95aab87de24e53333ae5d68
SSDEEP

3145728:HpdjR/QpdjR/7FXWBVwdhVTN1IrndBJj+NdtOg:HvRovRUVwd3NurdBJCZP

Score

10^/10

Malware Config

Targets

- Target
  
  minecraft xray.zip
- Size
  
  148.6MB
- MD5
  
  518933d7819991785b536632a774a2d9
- SHA1
  
  5a7b287de15c2b01acacf951de8810fe91e73000
- SHA256
  
  9955498358d9923d8765937fc7306061d98732e61c52117340d990759228e57f
- SHA512
  
  4dc9c3ecbfa641b8cc5e92700120b174922dfdb3b297a6e99aeb8bc7a3234a34fb82fb5ce8d803267f7c7e19500aafe488e3ae9ac95aab87de24e53333ae5d68
- SSDEEP
  
  3145728:HpdjR/QpdjR/7FXWBVwdhVTN1IrndBJj+NdtOg:HvRovRUVwd3NurdBJCZP
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

AgentTesla payload

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2