agenttesla | 2ff55120a26cd83bab41642227c18337c39c940d5df51f64be5ee156433a0fa5 | Triage

Sharing

General

Target

JaffaCakes118_45409a66d25d2533e4bb7b28a7cad382
Size

56KB
Sample

250128-bb3hwsskeq
MD5

45409a66d25d2533e4bb7b28a7cad382
SHA1

30383a4b6cad8eb544a011c588956787e4d05d78
SHA256

2ff55120a26cd83bab41642227c18337c39c940d5df51f64be5ee156433a0fa5
SHA512

9ee7a518ba08f6e29d6d1c4b94b5747f40405db026be05f635ba1887ffd85155b522ccd37fc4f88fe0412c597744531d0a0e125973bf1ba130cc43c1c972eec2
SSDEEP

768:GWocZ0BRFj5JSUn+IRfXB7IA7p/IsNmHPM/6eed7F29fzNORxib:GWfWB3Xl/D/IsNmi6eyFn3U

Score

10^/10

agenttesla discovery keylogger persistence spyware stealer trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_45409a66d25d2533e4bb7b28a7cad382
- Size
  
  56KB
- MD5
  
  45409a66d25d2533e4bb7b28a7cad382
- SHA1
  
  30383a4b6cad8eb544a011c588956787e4d05d78
- SHA256
  
  2ff55120a26cd83bab41642227c18337c39c940d5df51f64be5ee156433a0fa5
- SHA512
  
  9ee7a518ba08f6e29d6d1c4b94b5747f40405db026be05f635ba1887ffd85155b522ccd37fc4f88fe0412c597744531d0a0e125973bf1ba130cc43c1c972eec2
- SSDEEP
  
  768:GWocZ0BRFj5JSUn+IRfXB7IA7p/IsNmHPM/6eed7F29fzNORxib:GWfWB3Xl/D/IsNmi6eyFn3U
Score

10^/10

agenttesla discovery keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Agenttesla family
  agenttesla
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerpersistencespywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerpersistencespywarestealertrojan