agenttesla | 97087d3c897803cf198b24fc0d78bca69df692bc534b16fd070405325ee1a428 | Triage

Sharing

General

Target

97087d3c897803cf198b24fc0d78bca69df692bc534b16fd070405325ee1a428.exe
Size

1.1MB
Sample

240903-cjjw7avhpd
MD5

e0469f2b9c41656b83b878b401cf5cd0
SHA1

486bdac12feee6bd3cf99fa5fcd0297ef58d1521
SHA256

97087d3c897803cf198b24fc0d78bca69df692bc534b16fd070405325ee1a428
SHA512

553b012c73f4e88b310da76d8ca5957709b7d00bd170053a0aeb2e9da704d2c17ef4a3dc274ce6c8024f0bc85957bebb1b5885e4b1f1350da58a8e1061af8a32
SSDEEP

24576:LAHnh+eWsN3skA4RV1Hom2KXMmHaYMkZ/3kAn5:mh+ZkldoPK8YaYMW

Score

10^/10

agenttesla credential_access discovery keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
cp8nl.hyperhost.ua
Port:
587
Username:
[email protected]
Password:
rwe87$%21q
Email To:
[email protected]

Targets

- Target
  
  97087d3c897803cf198b24fc0d78bca69df692bc534b16fd070405325ee1a428.exe
- Size
  
  1.1MB
- MD5
  
  e0469f2b9c41656b83b878b401cf5cd0
- SHA1
  
  486bdac12feee6bd3cf99fa5fcd0297ef58d1521
- SHA256
  
  97087d3c897803cf198b24fc0d78bca69df692bc534b16fd070405325ee1a428
- SHA512
  
  553b012c73f4e88b310da76d8ca5957709b7d00bd170053a0aeb2e9da704d2c17ef4a3dc274ce6c8024f0bc85957bebb1b5885e4b1f1350da58a8e1061af8a32
- SSDEEP
  
  24576:LAHnh+eWsN3skA4RV1Hom2KXMmHaYMkZ/3kAn5:mh+ZkldoPK8YaYMW
Score

10^/10

agenttesla credential_access discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

behavioral2

agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan