agenttesla

General

Target

EKSTRE_1022.exe
Size

1.2MB
Sample

241121-j229taznhw
MD5

3503285c5dcb5ddf134d7617366cf050
SHA1

277773b0e3c13989a52ca37963f7e342fa1a0be8
SHA256

077dc59cc8a2b17c1c2f17f0620368fe3b252c881cdb600aee54662d2699351c
SHA512

dbc962ef078124d349ae90030462f601f6be5410edb2413dae1a158dec8793ca1454a000551ccdf8cf5d6839ebf91042579f16d3638fade66fcb05b9d9432f46
SSDEEP

24576:Qtb20pkaCqT5TBWgNQ7akJjJuEnxoGYgzF6A:ZVg5tQ7akJjTnth5

Score

10^/10

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
zqamcx.com
Port:
587
Username:
[email protected]
Password:
Methodman991
Email To:
[email protected]

Targets

- Target
  
  EKSTRE_1022.exe
- Size
  
  1.2MB
- MD5
  
  3503285c5dcb5ddf134d7617366cf050
- SHA1
  
  277773b0e3c13989a52ca37963f7e342fa1a0be8
- SHA256
  
  077dc59cc8a2b17c1c2f17f0620368fe3b252c881cdb600aee54662d2699351c
- SHA512
  
  dbc962ef078124d349ae90030462f601f6be5410edb2413dae1a158dec8793ca1454a000551ccdf8cf5d6839ebf91042579f16d3638fade66fcb05b9d9432f46
- SSDEEP
  
  24576:Qtb20pkaCqT5TBWgNQ7akJjJuEnxoGYgzF6A:ZVg5tQ7akJjTnth5
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Agenttesla family
  agenttesla
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Agenttesla family

Drops startup file

Executes dropped EXE

Loads dropped DLL

AutoIT Executable

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2