agenttesla | 67e900002f5cff55084abd74646c25e1d22cf652cb0142315ab4bdc2906aad53 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
MZyeln5mSFOjxMx.exe
Size 702KB
Sample210504-1s3cc3phf2
SHA256 67e900002f5cff55084abd74646c25e1d22cf652cb0142315ab4bdc2906aad53
MD5 a1f21deabde4ac7fe57170410912cdd2
SHA1 9cd78ad0b7b988373870ddff2048f39bbc2a58df
SHA512 96e9ca5076696300a1621bd4cc90dba8fb589ff9cd88f44c859a4705c07ef780b16c4d47bf6d7b667f0f8172d8095eacf02061cde712a22649cff1510e06feb9
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.iykmoreentrprise.org
Port
587
Username
[email protected]
Password
rwkWCM328

Targets

- Target
  MZyeln5mSFOjxMx.exe
- Size 702KB
- SHA256 67e900002f5cff55084abd74646c25e1d22cf652cb0142315ab4bdc2906aad53
- MD5 a1f21deabde4ac7fe57170410912cdd2
- SHA1 9cd78ad0b7b988373870ddff2048f39bbc2a58df
- SHA512 96e9ca5076696300a1621bd4cc90dba8fb589ff9cd88f44c859a4705c07ef780b16c4d47bf6d7b667f0f8172d8095eacf02061cde712a22649cff1510e06feb9
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan