agenttesla | 68f00ee256e3715f753bf722eb0734f3e74030c0ce054acc30030387d0b4b8ad | Triage

Sharing

General

Target

e0469f2b9c41656b83b878b401cf5cd0.bin
Size

648KB
Sample

240904-n4zc6a1cma
MD5

d6b28db8f0445601d7b08856d2cd29dc
SHA1

e31d9d42a84aaeb24a0e672e6b08cd896a051da2
SHA256

68f00ee256e3715f753bf722eb0734f3e74030c0ce054acc30030387d0b4b8ad
SHA512

52bade3d952c626614c0d15db857032cbc9af3174d225e6deaa9528ff36f8c1cbb48551a55794084991b1ba03df37a66c4570d43f2987a1a00fd0e36c8cbf4ad
SSDEEP

12288:uGp0HEvAa3yFosRgwrY123SgNgjh1J4W13+8xfbp3AvrBBMDezxq50ZNRw9Dge9o:deu3rsR3Y1XgN+h1J4U3+MfbiaGq50TZ

Score

10^/10

agenttesla credential_access discovery keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
cp8nl.hyperhost.ua
Port:
587
Username:
[email protected]
Password:
rwe87$%21q
Email To:
[email protected]

Targets

- Target
  
  97087d3c897803cf198b24fc0d78bca69df692bc534b16fd070405325ee1a428.exe
- Size
  
  1.1MB
- MD5
  
  e0469f2b9c41656b83b878b401cf5cd0
- SHA1
  
  486bdac12feee6bd3cf99fa5fcd0297ef58d1521
- SHA256
  
  97087d3c897803cf198b24fc0d78bca69df692bc534b16fd070405325ee1a428
- SHA512
  
  553b012c73f4e88b310da76d8ca5957709b7d00bd170053a0aeb2e9da704d2c17ef4a3dc274ce6c8024f0bc85957bebb1b5885e4b1f1350da58a8e1061af8a32
- SSDEEP
  
  24576:LAHnh+eWsN3skA4RV1Hom2KXMmHaYMkZ/3kAn5:mh+ZkldoPK8YaYMW
Score

10^/10

agenttesla credential_access discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

behavioral2

agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan