agenttesla | b166a8ebdb437055e1fe7e5b81c525e3dd4b80f5949c1ddcb75c88f59173a4e2 | Triage

Sharing

General

Target

-x.exe
Size

2.7MB
Sample

240914-v341kswgje
MD5

6b5b5779dec66d876022b5ff3d82bf82
SHA1

9e47c838a7532674962b8ddb9e4074995a83c154
SHA256

b166a8ebdb437055e1fe7e5b81c525e3dd4b80f5949c1ddcb75c88f59173a4e2
SHA512

2fe290b40e9aeb0899feb91b189b4fc875d7c3f48a16ee8cb6419c2170a2465557bea26f6be639223506423fbf6c725e36bc59682e50b3acc69c9839abaa8301
SSDEEP

49152:+k3DYdh9pfoh9pf3ITYbNbNWo4kSH3OqtwIyBn783vSskcu:+k3DYdhEhLIT4bNJFY3OqteR8/Vkcu

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  -x.exe
- Size
  
  2.7MB
- MD5
  
  6b5b5779dec66d876022b5ff3d82bf82
- SHA1
  
  9e47c838a7532674962b8ddb9e4074995a83c154
- SHA256
  
  b166a8ebdb437055e1fe7e5b81c525e3dd4b80f5949c1ddcb75c88f59173a4e2
- SHA512
  
  2fe290b40e9aeb0899feb91b189b4fc875d7c3f48a16ee8cb6419c2170a2465557bea26f6be639223506423fbf6c725e36bc59682e50b3acc69c9839abaa8301
- SSDEEP
  
  49152:+k3DYdh9pfoh9pf3ITYbNbNWo4kSH3OqtwIyBn783vSskcu:+k3DYdhEhLIT4bNJFY3OqteR8/Vkcu
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan