agenttesla | 4550cd933a3377cb684ee448c73853dc7d82f86df263ba5f083b4bed4decfa18 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ee82bea74fa995a39492f062a1da1cc4.exe
Size 1.1MB
Sample201002-lfpp597ppj
SHA256 4550cd933a3377cb684ee448c73853dc7d82f86df263ba5f083b4bed4decfa18
MD5 ee82bea74fa995a39492f062a1da1cc4
SHA1 7a9d96de8c29b0f87c739be457f5aff323c03396
SHA512 58c1fb6f16501c8497f57d03491c649525fbbc2143fe10ca234f6487d894b2da6707586e92524db670a60b4ab8603d55e28ad105a21983fbc578f76c292c9d4f
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
OSINACHI3116

Targets

- Target
  ee82bea74fa995a39492f062a1da1cc4.exe
- Size 1.1MB
- SHA256 4550cd933a3377cb684ee448c73853dc7d82f86df263ba5f083b4bed4decfa18
- MD5 ee82bea74fa995a39492f062a1da1cc4
- SHA1 7a9d96de8c29b0f87c739be457f5aff323c03396
- SHA512 58c1fb6f16501c8497f57d03491c649525fbbc2143fe10ca234f6487d894b2da6707586e92524db670a60b4ab8603d55e28ad105a21983fbc578f76c292c9d4f
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan