agenttesla | 416de27ffdf83d83d86f1fefa55051e0786ec9a1dd4255067bf58db98698ba19 | Triage

Sharing

General

Target

IRFAN X PANEL-protected.exe
Size

3.3MB
Sample

240915-g299bazejq
MD5

9dd5811d2b68628f26113c52e0a3a36c
SHA1

34eb785d62e4d0af1bc481d93dbdcdaf1864d94e
SHA256

416de27ffdf83d83d86f1fefa55051e0786ec9a1dd4255067bf58db98698ba19
SHA512

c0bb161a06101d175c0842376a051edbd1ee6ceeb17109281c97e898d83e1d5f6098c8809f50e0ce773d50f4454c8c1dbdf42b0625849c52ddc6acc72f80e094
SSDEEP

98304:Af/BjysHjHIT4bNJFY3Oqt3kqXf0FQPM:6/BjNHjHjBHYnkSIQ

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  IRFAN X PANEL-protected.exe
- Size
  
  3.3MB
- MD5
  
  9dd5811d2b68628f26113c52e0a3a36c
- SHA1
  
  34eb785d62e4d0af1bc481d93dbdcdaf1864d94e
- SHA256
  
  416de27ffdf83d83d86f1fefa55051e0786ec9a1dd4255067bf58db98698ba19
- SHA512
  
  c0bb161a06101d175c0842376a051edbd1ee6ceeb17109281c97e898d83e1d5f6098c8809f50e0ce773d50f4454c8c1dbdf42b0625849c52ddc6acc72f80e094
- SSDEEP
  
  98304:Af/BjysHjHIT4bNJFY3Oqt3kqXf0FQPM:6/BjNHjHjBHYnkSIQ
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan