agenttesla | f4aea90790ab8eb0da7876eee1a1f2e56505cd7f9a8d4a2125c9bc2a2254b03e | Triage

Sharing

General

Target

spoofer.exe
Size

5.6MB
Sample

240909-zjad3sygkk
MD5

05b8c2b4dcdc13f67f4c9e95c3160091
SHA1

efa4e9cd3dcc41b33e966623a21f00dca13d989a
SHA256

f4aea90790ab8eb0da7876eee1a1f2e56505cd7f9a8d4a2125c9bc2a2254b03e
SHA512

4319911fffa5c1a0b5536d0f5cca742c9eaa6de023b0ec392dad3b39bf80234ae3b685a7b98cb80811bc22efa327cff7c4172e92df39d929d3fc1dc53157b71c
SSDEEP

98304:z6zFPIT4bNJFY3Oqt+3B5I6klntULx//9eLFVRYMq1cRd5ja268I9X6Lex5uTkq9:ezljBHYO3BZLxH8L/RYMi8LallZ6lTko

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  spoofer.exe
- Size
  
  5.6MB
- MD5
  
  05b8c2b4dcdc13f67f4c9e95c3160091
- SHA1
  
  efa4e9cd3dcc41b33e966623a21f00dca13d989a
- SHA256
  
  f4aea90790ab8eb0da7876eee1a1f2e56505cd7f9a8d4a2125c9bc2a2254b03e
- SHA512
  
  4319911fffa5c1a0b5536d0f5cca742c9eaa6de023b0ec392dad3b39bf80234ae3b685a7b98cb80811bc22efa327cff7c4172e92df39d929d3fc1dc53157b71c
- SSDEEP
  
  98304:z6zFPIT4bNJFY3Oqt+3B5I6klntULx//9eLFVRYMq1cRd5ja268I9X6Lex5uTkq9:ezljBHYO3BZLxH8L/RYMi8LallZ6lTko
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan