agenttesla | b851c87747b6c4b653bf0a62e1d46a5aa56a95e2cd80f32305535c7159ebc295 | Triage

Sharing

General

Target

ViperX+Spoofer.exe
Size

2.0MB
Sample

240907-vqa7qsxapc
MD5

94b84ea40ba19927a81faed654c470cd
SHA1

3e35da27f88a8c0f0bd9f8b74c064c5817e2d476
SHA256

b851c87747b6c4b653bf0a62e1d46a5aa56a95e2cd80f32305535c7159ebc295
SHA512

8fb08392a9e1f30c6e95145c9e05cae15aa1d63a5adcc3949d45514d3a28d1534e5c60de3c9e764f28e601dea40120b08d25745f2f74c1fa7418dada92afdae3
SSDEEP

49152:3XcgX/DTInpWQOZITYbNbNWo4kSH3OqtwIjkqXfd+/9AqAana:3XcYgwQOZIT4bNJFY3OqtXkqXf0FPAW

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  ViperX+Spoofer.exe
- Size
  
  2.0MB
- MD5
  
  94b84ea40ba19927a81faed654c470cd
- SHA1
  
  3e35da27f88a8c0f0bd9f8b74c064c5817e2d476
- SHA256
  
  b851c87747b6c4b653bf0a62e1d46a5aa56a95e2cd80f32305535c7159ebc295
- SHA512
  
  8fb08392a9e1f30c6e95145c9e05cae15aa1d63a5adcc3949d45514d3a28d1534e5c60de3c9e764f28e601dea40120b08d25745f2f74c1fa7418dada92afdae3
- SSDEEP
  
  49152:3XcgX/DTInpWQOZITYbNbNWo4kSH3OqtwIjkqXfd+/9AqAana:3XcYgwQOZIT4bNJFY3OqtXkqXf0FPAW
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan