agenttesla | a3896ac68e642d9a9e8f95eeec58ad63841beaef1d6fe1a9165f9432d916bb9f | Triage

Sharing

General

Target

Trojan.Win32.Leonem-a3896ac68e642d9a9e8f95eeec58ad63841beaef1d6fe1a9165f9432d916bb9fN
Size

1.1MB
Sample

240915-1j91dateje
MD5

10b5e6b6127632c068263ee02fce3230
SHA1

4694ebc1bf9fc5ce5f9b1dca54b9463bfb5228df
SHA256

a3896ac68e642d9a9e8f95eeec58ad63841beaef1d6fe1a9165f9432d916bb9f
SHA512

219a8aed9c8356b07ce29ce87ec88d50ce0fde9d00d568be0b5bb4729e48286bc8dda9aaf8ce36e6c4e6c7d1ba86d0fc63eac1fae4f01af57b9130c91da41b5f
SSDEEP

24576:I4lavt0LkLL9IMixoEgeaeYB4/kv0p4J1VTCOYsq9MmCS:fkwkn9IMHeaeY+8v0YVXaPCS

Score

10^/10

agenttesla credential_access discovery keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.worlorderbillions.top
Port:
587
Username:
[email protected]
Password:
3^?r?mtxk(kt
Email To:
[email protected]

Targets

- Target
  
  Trojan.Win32.Leonem-a3896ac68e642d9a9e8f95eeec58ad63841beaef1d6fe1a9165f9432d916bb9fN
- Size
  
  1.1MB
- MD5
  
  10b5e6b6127632c068263ee02fce3230
- SHA1
  
  4694ebc1bf9fc5ce5f9b1dca54b9463bfb5228df
- SHA256
  
  a3896ac68e642d9a9e8f95eeec58ad63841beaef1d6fe1a9165f9432d916bb9f
- SHA512
  
  219a8aed9c8356b07ce29ce87ec88d50ce0fde9d00d568be0b5bb4729e48286bc8dda9aaf8ce36e6c4e6c7d1ba86d0fc63eac1fae4f01af57b9130c91da41b5f
- SSDEEP
  
  24576:I4lavt0LkLL9IMixoEgeaeYB4/kv0p4J1VTCOYsq9MmCS:fkwkn9IMHeaeY+8v0YVXaPCS
Score

10^/10

discovery agenttesla credential_access keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan