agenttesla | 592e175a523f6c5edb0e51f42b50161ee0bd2cd4e7d6a2e415f89fc99225c997 | Triage

Sharing

General

Target

inquiry_qoutation_Europe_Hydraulic Partner, LLC_7638628279_uue.uue
Size

315KB
Sample

241002-raecnstcpe
MD5

a25192acd1f243a5cf58959cfaf01465
SHA1

6e72c548d96ba4d70208ca8fb378d587bec6ac28
SHA256

592e175a523f6c5edb0e51f42b50161ee0bd2cd4e7d6a2e415f89fc99225c997
SHA512

b7745f15d79abd9adfbcd1efe739f374b5d63ad1cf6a1bd707c855f369e809fded2719b7b41b06832516eedb78842313c10bdc6929ffac133df9bd71f2b04c1e
SSDEEP

6144:6rLNA+dXLDbpJxc8RhFAOefK7CZdOsu/vVDh6sd+gGO8AzFZg0:eLNA+l/b3eJMfYRONHn

Score

10^/10

agenttesla discovery keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: ftp
Host:
ftp://ftp.alternatifplastik.com
Port:
21
Username:
[email protected]
Password:
Fineboy777@

Targets

- Target
  
  inquiry_qoutation_Europe_Hydraulic Partner, LLC_7638628279_uue.exe
- Size
  
  814KB
- MD5
  
  0ad77182f6aeae3adfa6ccc0aa964a5e
- SHA1
  
  fd2836072c56df6f9a9ec2dc7930f2bd1ad3773e
- SHA256
  
  d06eb6963064af04b5249b6e488fbd53cf97dd09a4d18144560488df9f473db7
- SHA512
  
  81bb614397ad1e71681f741325027a098a27b467b76bb23fc17be4c22c667de01f22fce8e136ede8784e9b178a7c1e6b862fa31cc48a28aeab1808bd44e1c32c
- SSDEEP
  
  24576:nqWVc+80IHhD5fhrZ3B7nnUeGZKqX7IM:FW+tIHhD5fhrZ3B7nnUDZP
Score

10^/10

discovery agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

agenttesladiscoverykeyloggerpersistencespywarestealertrojan