agenttesla | 8d96024a5d49ac0c7516827f47f074f986e20cd2ba475e5d912a18ef89cadc0a | Triage

Resubmissions

09-09-2024 00:41

240909-a17ngatbnk 10

09-09-2024 00:33

240909-awlv7swakh 10

Sharing

General

Target

PowerChanger free(1).exe
Size

6.9MB
Sample

240909-awlv7swakh
MD5

fe426d0c55e659f7855f5629b43526e6
SHA1

256a0e3eec6d6238aebcccd0bc38448d9d893b1c
SHA256

8d96024a5d49ac0c7516827f47f074f986e20cd2ba475e5d912a18ef89cadc0a
SHA512

7f59e96125c2002480e1cabc76cd2f1c250570e44c9a687a792d0cc5f75b2dc45f987ac6943bec67eed7cdaef0347a5721fe5e43e547daf60c10a4f710072600
SSDEEP

196608:sBYUOztYQC4wmOH2dWJMicb5zBXVnTekSIgOe:sAzupHjJdIbakSpO

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  PowerChanger free(1).exe
- Size
  
  6.9MB
- MD5
  
  fe426d0c55e659f7855f5629b43526e6
- SHA1
  
  256a0e3eec6d6238aebcccd0bc38448d9d893b1c
- SHA256
  
  8d96024a5d49ac0c7516827f47f074f986e20cd2ba475e5d912a18ef89cadc0a
- SHA512
  
  7f59e96125c2002480e1cabc76cd2f1c250570e44c9a687a792d0cc5f75b2dc45f987ac6943bec67eed7cdaef0347a5721fe5e43e547daf60c10a4f710072600
- SSDEEP
  
  196608:sBYUOztYQC4wmOH2dWJMicb5zBXVnTekSIgOe:sAzupHjJdIbakSpO
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan