agenttesla | 48d549e9bbe11f4e45cd39a99f3668743076c63361d1e7fd7dedcd361b4cf368 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
po478.exe
Size 1.6MB
Sample201106-m1a9daq35x
SHA256 48d549e9bbe11f4e45cd39a99f3668743076c63361d1e7fd7dedcd361b4cf368
MD5 69f9178b3240d69ce8676a19c2c6955e
SHA1 1f9f67b732b97342ac9c373513a7da156f78bc05
SHA512 d7cab2a6527b4f5c5ce946a62f4122a945d607e9dd3c50a07e0ba2f78ccc8aff543c67f06032243486ee90b313e67895211c00e199a6d69dd9dfec8022396071
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.blenco.eu
Port
587
Username
[email protected]
Password
rDF#Qwk2

Targets

- Target
  po478.exe
- Size 1.6MB
- SHA256 48d549e9bbe11f4e45cd39a99f3668743076c63361d1e7fd7dedcd361b4cf368
- MD5 69f9178b3240d69ce8676a19c2c6955e
- SHA1 1f9f67b732b97342ac9c373513a7da156f78bc05
- SHA512 d7cab2a6527b4f5c5ce946a62f4122a945d607e9dd3c50a07e0ba2f78ccc8aff543c67f06032243486ee90b313e67895211c00e199a6d69dd9dfec8022396071
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan