agenttesla | 2bec7ecaf6360e49bbc65ebb496cd26001e349945eff22b8e44e766a17a65b83 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Inv00911.exe
Size 376KB
Sample201109-ypf4fbd282
SHA256 2bec7ecaf6360e49bbc65ebb496cd26001e349945eff22b8e44e766a17a65b83
MD5 82242ff422de029945185cf2ed92aa25
SHA1 ed675a40e5f5b48eefd754e532e40847e3396dc3
SHA512 207d9d732fbfee7f594c71090a1f2f0de1dc70a718b5d282659a2663ec398ede9525d77b5c7833a45b183ad65ee492201c2c95cb6f1d8149e41edd04adaf2151
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.chinagrill.co
Port
587
Username
[email protected]
Password
SnIVrXH!]f1q

Targets

- Target
  Inv00911.exe
- Size 376KB
- SHA256 2bec7ecaf6360e49bbc65ebb496cd26001e349945eff22b8e44e766a17a65b83
- MD5 82242ff422de029945185cf2ed92aa25
- SHA1 ed675a40e5f5b48eefd754e532e40847e3396dc3
- SHA512 207d9d732fbfee7f594c71090a1f2f0de1dc70a718b5d282659a2663ec398ede9525d77b5c7833a45b183ad65ee492201c2c95cb6f1d8149e41edd04adaf2151
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan