agenttesla | 8724dde766e041f9abefeba720eccd78f783545c4273681ba54c7133e0e809df | Triage

Sharing

General

Target

WIN CHANGER 2.3 (1).exe
Size

402.8MB
Sample

240916-dvmmwswhrq
MD5

ac6f996ca7511978a0cb3595aa64ed64
SHA1

3d92d0feed1a705e520fe56762ae8c3aaf87e500
SHA256

8724dde766e041f9abefeba720eccd78f783545c4273681ba54c7133e0e809df
SHA512

b632ca45a3c30576d36b32374e6e4a6ce89fe7bb0d0a694ca8a5a3bb93d8d8c6a4f21738f39cfc4f0f02033e574f4018a9e5ba52ee575bf20758a74316f469ae
SSDEEP

6291456:BUVsZ8ANCCZtf0vsnlaje4V7U7w9g8DMbT1NOpMFJvWZT35eM/e0FdLR:B58ApZjn4BL9g4MF19R

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  WIN CHANGER 2.3 (1).exe
- Size
  
  402.8MB
- MD5
  
  ac6f996ca7511978a0cb3595aa64ed64
- SHA1
  
  3d92d0feed1a705e520fe56762ae8c3aaf87e500
- SHA256
  
  8724dde766e041f9abefeba720eccd78f783545c4273681ba54c7133e0e809df
- SHA512
  
  b632ca45a3c30576d36b32374e6e4a6ce89fe7bb0d0a694ca8a5a3bb93d8d8c6a4f21738f39cfc4f0f02033e574f4018a9e5ba52ee575bf20758a74316f469ae
- SSDEEP
  
  6291456:BUVsZ8ANCCZtf0vsnlaje4V7U7w9g8DMbT1NOpMFJvWZT35eM/e0FdLR:B58ApZjn4BL9g4MF19R
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan