agenttesla | e36bee5cab09cae33aba2618f5e75fef626843802bca60878c16399e1535d76f | Triage

Sharing

General

Target

CounterX2.0.exe
Size

10.7MB
Sample

240914-wq725sxfkn
MD5

3d306cd936ed5464528344468af1a2c8
SHA1

c7b961b5c28d91e7e05aab00a4a76d1e0f05aab3
SHA256

e36bee5cab09cae33aba2618f5e75fef626843802bca60878c16399e1535d76f
SHA512

a09cbe428c9c82ae3b39b2fc839d568f3bd90456bf171bec17adae2d23b6c8328f34f8519de6ef6dbd2b800eb9c2975e6445bd36980d5a9f7bc784114b435fd9
SSDEEP

196608:8YpUzYpUHYpUEYpUHYpUuRYVxRYVdtTyKHEyUBkSI:8YpcYpSYpPYpSYpmeTtTyAEy+kS

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  CounterX2.0.exe
- Size
  
  10.7MB
- MD5
  
  3d306cd936ed5464528344468af1a2c8
- SHA1
  
  c7b961b5c28d91e7e05aab00a4a76d1e0f05aab3
- SHA256
  
  e36bee5cab09cae33aba2618f5e75fef626843802bca60878c16399e1535d76f
- SHA512
  
  a09cbe428c9c82ae3b39b2fc839d568f3bd90456bf171bec17adae2d23b6c8328f34f8519de6ef6dbd2b800eb9c2975e6445bd36980d5a9f7bc784114b435fd9
- SSDEEP
  
  196608:8YpUzYpUHYpUEYpUHYpUuRYVxRYVdtTyKHEyUBkSI:8YpcYpSYpPYpSYpmeTtTyAEy+kS
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan