agenttesla | bdd3e02711a244f9cdb3af3fed65a5b94fdce88a3a5686b3f32bef9f64ceb555 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.ArtemisC483A6DE77F4.29079.7004
Size 1.3MB
Sample210426-ay3msbhedx
SHA256 bdd3e02711a244f9cdb3af3fed65a5b94fdce88a3a5686b3f32bef9f64ceb555
MD5 c483a6de77f4e5e9409f381803cdc300
SHA1 6dee53dcffe7e9e2070345efb0141497d1e4752c
SHA512 327cec7dcc243b6212310c7ec59b7557410106fd825e82ae7d3f5a42060f0b55ec7ffe501d0fe98c96bcc413eddb4da023de82a0561321e50b304d6d26ea1486
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.mynewexodus.com
Port
587
Username
[email protected]
Password
nQhA*dx5

Targets

- Target
  SecuriteInfo.com.ArtemisC483A6DE77F4.29079.7004
- Size 1.3MB
- SHA256 bdd3e02711a244f9cdb3af3fed65a5b94fdce88a3a5686b3f32bef9f64ceb555
- MD5 c483a6de77f4e5e9409f381803cdc300
- SHA1 6dee53dcffe7e9e2070345efb0141497d1e4752c
- SHA512 327cec7dcc243b6212310c7ec59b7557410106fd825e82ae7d3f5a42060f0b55ec7ffe501d0fe98c96bcc413eddb4da023de82a0561321e50b304d6d26ea1486
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan