agenttesla | d519955c798084e68d2f92711ae7d69b0eed092d8f51c059dedd570ee3e29556 | Triage

Sharing

General

Target

d519955c798084e68d2f92711ae7d69b0eed092d8f51c059dedd570ee3e29556
Size

2.8MB
Sample

240914-wvfhpaxgqr
MD5

064fcba039ff69b7cd8f1acd4a28834a
SHA1

a454c4c035d6ad973e5bd5d60e664f1e4a5ccd31
SHA256

d519955c798084e68d2f92711ae7d69b0eed092d8f51c059dedd570ee3e29556
SHA512

8252cfed6d5e08537300a5955c5c5c4029773ac16a57521ec04c7088f63098b7022887880fd8bd46c2daa3f3e47814e7db7d8c6c6f31b083ac781d93a4d1fcd8
SSDEEP

49152:DJdngwwHv5VbtHw4MnBm6w30IU+qR21rDXr+8kcXc+sPwi4z9OUnyiW+FPUq:zgNhVRwfBmDDU+qRkHbzMz94z9OUjU

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  d519955c798084e68d2f92711ae7d69b0eed092d8f51c059dedd570ee3e29556
- Size
  
  2.8MB
- MD5
  
  064fcba039ff69b7cd8f1acd4a28834a
- SHA1
  
  a454c4c035d6ad973e5bd5d60e664f1e4a5ccd31
- SHA256
  
  d519955c798084e68d2f92711ae7d69b0eed092d8f51c059dedd570ee3e29556
- SHA512
  
  8252cfed6d5e08537300a5955c5c5c4029773ac16a57521ec04c7088f63098b7022887880fd8bd46c2daa3f3e47814e7db7d8c6c6f31b083ac781d93a4d1fcd8
- SSDEEP
  
  49152:DJdngwwHv5VbtHw4MnBm6w30IU+qR21rDXr+8kcXc+sPwi4z9OUnyiW+FPUq:zgNhVRwfBmDDU+qRkHbzMz94z9OUjU
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan