agenttesla | 32dbfe6f42c146969736602b95b0886e6c66e68c36d24e97c45ac6b9f9d490b1 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
QUOTE B1018500.pdf.exe
Size 719KB
Sample200909-6yncvgeefe
SHA256 32dbfe6f42c146969736602b95b0886e6c66e68c36d24e97c45ac6b9f9d490b1
MD5 7031cc1f86b59fb91dfbe407b8241d70
SHA1 91c091f7b1c7314b2e8ad650d3f7d4260e88c9fc
SHA512 be0bb1cfa8abf4f763b98455cacb2d75d597847f3edceee2dc73b30e6c2ee4ee4ad8a0aef3c6230845c14386235102671b49ec15f1317c9300740e9c3a1dc8fb
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
H(FPf]j;OgNA

Targets

- Target
  QUOTE B1018500.pdf.exe
- Size 719KB
- SHA256 32dbfe6f42c146969736602b95b0886e6c66e68c36d24e97c45ac6b9f9d490b1
- MD5 7031cc1f86b59fb91dfbe407b8241d70
- SHA1 91c091f7b1c7314b2e8ad650d3f7d4260e88c9fc
- SHA512 be0bb1cfa8abf4f763b98455cacb2d75d597847f3edceee2dc73b30e6c2ee4ee4ad8a0aef3c6230845c14386235102671b49ec15f1317c9300740e9c3a1dc8fb
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan