agenttesla | 3c2370ce32ad868db22afbfc2d2eceff9f7af2f3daf4d3ce34d8800e0c07d89b | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PO.exe
Size 405KB
Sample201109-acls2nvm4e
SHA256 3c2370ce32ad868db22afbfc2d2eceff9f7af2f3daf4d3ce34d8800e0c07d89b
MD5 a8f56e36988b06337a3f640b44b88ec7
SHA1 20c756bd735264d435b970bf7804db19016a66a2
SHA512 95ff72bf40166a1acd24296ac71a6b55a7c084fa40fef82bf4658a446200a7b564f8c2a632faa0a2c5270cd40f4946d5df4df4c867ec0964da69ecd74b860512
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mitendiorigin.cf
Port
587
Username
[email protected]
Password
Spoofyou2015$

Targets

- Target
  PO.exe
- Size 405KB
- SHA256 3c2370ce32ad868db22afbfc2d2eceff9f7af2f3daf4d3ce34d8800e0c07d89b
- MD5 a8f56e36988b06337a3f640b44b88ec7
- SHA1 20c756bd735264d435b970bf7804db19016a66a2
- SHA512 95ff72bf40166a1acd24296ac71a6b55a7c084fa40fef82bf4658a446200a7b564f8c2a632faa0a2c5270cd40f4946d5df4df4c867ec0964da69ecd74b860512
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan