agenttesla | 21b4ef7daa0edacc38c3b0a582ccc3ae3c3852c06733cd7fc543d346fe545fa1 | Triage

Sharing

General

Target

21b4ef7daa0edacc38c3b0a582ccc3ae3c3852c06733cd7fc543d346fe545fa1
Size

667KB
Sample

250113-bfs51s1jfl
MD5

9355c0650f7d93309623377fec4f5f79
SHA1

93e25eebb5fd19d3924ea88f11b1067e977fd03a
SHA256

21b4ef7daa0edacc38c3b0a582ccc3ae3c3852c06733cd7fc543d346fe545fa1
SHA512

5c942cf63d9bcad72d9d33312b72b35d2459daa32fdba426219ade754d4215353a42cdce1eddb6c60d9c7530ce0815e3e9c5a271a6936bda614cdbb44ad61470
SSDEEP

12288:e3L87+2lVqhrSEtPQabCvCFPOc8QOu3Mq2aIg+PUrg2ZJmLm6bW47R2KELnnrCAs:Ug7+2lVqhGYHrhn372fPUrJYy9KELn+n

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
ssl0.ovh.net
Port:
587
Username:
[email protected]
Password:
SZx^87o69m
Email To:
[email protected]

Targets

- Target
  
  21b4ef7daa0edacc38c3b0a582ccc3ae3c3852c06733cd7fc543d346fe545fa1
- Size
  
  667KB
- MD5
  
  9355c0650f7d93309623377fec4f5f79
- SHA1
  
  93e25eebb5fd19d3924ea88f11b1067e977fd03a
- SHA256
  
  21b4ef7daa0edacc38c3b0a582ccc3ae3c3852c06733cd7fc543d346fe545fa1
- SHA512
  
  5c942cf63d9bcad72d9d33312b72b35d2459daa32fdba426219ade754d4215353a42cdce1eddb6c60d9c7530ce0815e3e9c5a271a6936bda614cdbb44ad61470
- SSDEEP
  
  12288:e3L87+2lVqhrSEtPQabCvCFPOc8QOu3Mq2aIg+PUrg2ZJmLm6bW47R2KELnnrCAs:Ug7+2lVqhGYHrhn372fPUrJYy9KELn+n
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Agenttesla family
  agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan