agenttesla | 90708abbcad8c3e95f37fb29927781a1ec885a9c3799b50f7dcc01e1b4065baa | Triage

Resubmissions

14-09-2024 04:07

240914-epr6vswcnq 10

14-09-2024 04:03

240914-emf1tawfnc 10

14-09-2024 04:02

240914-elt62swbnj 3

Sharing

General

Target

asd.txt
Size

93B
Sample

240914-epr6vswcnq
MD5

7213463c27611670218de026f379a4a7
SHA1

90750ced837038b11524c1dba538785414bba6e3
SHA256

90708abbcad8c3e95f37fb29927781a1ec885a9c3799b50f7dcc01e1b4065baa
SHA512

734dfaf55bbba3e05c6bb8a2582aae5defc7336133d96714ca93123843cf476e1e4fdf905a18598e7c9e0ad19cbc98e9affe0e4df296ab4c5d30012f12093f4a

Score

10^/10

agenttesla discovery keylogger persistence spyware stealer trojan

Malware Config

Targets

- Target
  
  asd.txt
- Size
  
  93B
- MD5
  
  7213463c27611670218de026f379a4a7
- SHA1
  
  90750ced837038b11524c1dba538785414bba6e3
- SHA256
  
  90708abbcad8c3e95f37fb29927781a1ec885a9c3799b50f7dcc01e1b4065baa
- SHA512
  
  734dfaf55bbba3e05c6bb8a2582aae5defc7336133d96714ca93123843cf476e1e4fdf905a18598e7c9e0ad19cbc98e9affe0e4df296ab4c5d30012f12093f4a
Score

10^/10

agenttesla discovery keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Sets service image path in registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

agenttesladiscoverykeyloggerpersistencespywarestealertrojan