agenttesla | 5ef923b33e739cebbd07ccfe1b6f624ccc717813875ee7b4459c202639ec2f10 | Triage

Resubmissions

06-09-2024 21:44

240906-1lt2yazcna 10

06-09-2024 18:31

240906-w54y2asbkh 10

Sharing

General

Target

Luxury Shield (Stealer) v1.2.zip
Size

4.3MB
Sample

240906-1lt2yazcna
MD5

09a64beb7141299b68b90e42dd4d75cb
SHA1

1c920a8e3a2a7b9c3af96e1eb29dd723b8048132
SHA256

5ef923b33e739cebbd07ccfe1b6f624ccc717813875ee7b4459c202639ec2f10
SHA512

c2085cb837a401d3ac0c2900c5521ee0eb70b4ff913b1d0bd92c282d1ac55c1678a00f4bfec434f5dc379d0336daa09c30a3b4bbb245befb193b5c8e2a0cb7b1
SSDEEP

98304:oHvlaho37gQmuQshejCj7618dCe4w5Pii1yYsC44wZOmSilDU:oHvl2U7xF2GjHdn4wsi1ZsMYDU

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  Luxury Shield Stealer.exe
- Size
  
  4.5MB
- MD5
  
  5031c4cf1571a91bea574902cc151340
- SHA1
  
  bc317e4c53de8065424949d0c1ca3ab3ba9d32ec
- SHA256
  
  48fc3fe76df9f02edac8ca1892dfdc50901a2a324914466e3c45a6789c3130bf
- SHA512
  
  08f9cb6b3d649eb317877eb99d008353351060d82dc29925821b17a84fbb87b7ae9825ff37c2748e6257e543f17379da3e546d457a26c02bfce26b0056ec8cd2
- SSDEEP
  
  98304:UQZsta5rgCmE6snq9Kj1kXilKmKC5PoMbK2K4++wvumUajj:DZa+rJd6wjhlbKC2MbtKGAj
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Blocklisted process makes network request
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan