agenttesla | a3c0fba4670ffe0873aa0ac3d0d337e9ead4257b02ad2e768ae2c363b6a9bc94 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
god.exe
Size 850KB
Sample210318-e482fbphs2
SHA256 a3c0fba4670ffe0873aa0ac3d0d337e9ead4257b02ad2e768ae2c363b6a9bc94
MD5 f5aba857a2feeb7212967f70a0196d11
SHA1 f4dffd993413b02b21564ddb63183ddb75f00526
SHA512 2c2da37988e0ed59a7a725e123afe2913a5dc02a8eea3ee5c625fa28e373f2a873e6c28a3c96587ee13acbef82094d89b3505b77d29f78293b76c3f0640c624b
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
DANIEL3116

Targets

- Target
  god.exe
- Size 850KB
- SHA256 a3c0fba4670ffe0873aa0ac3d0d337e9ead4257b02ad2e768ae2c363b6a9bc94
- MD5 f5aba857a2feeb7212967f70a0196d11
- SHA1 f4dffd993413b02b21564ddb63183ddb75f00526
- SHA512 2c2da37988e0ed59a7a725e123afe2913a5dc02a8eea3ee5c625fa28e373f2a873e6c28a3c96587ee13acbef82094d89b3505b77d29f78293b76c3f0640c624b
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan