agenttesla | 1b22cede73b15157e4e5555e8729d6203f563e73943033e26e1082f27576a7b2 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.PackedNET.785.508.32674
Size 1.1MB
Sample210601-89eceb627x
SHA256 1b22cede73b15157e4e5555e8729d6203f563e73943033e26e1082f27576a7b2
MD5 d3ad204cd7500b797fee163cd10bf75b
SHA1 6b45ec03eb527190bbe203628ade97bb140afa52
SHA512 22b0df099d58baf4468972b93266e34db653bf34edfb8edfb0287419822c7b9db20ad9facb3072d637e57f44a7c78b6d0adae2bea7febebb50b1cb882b5d6cbe
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.mercafar.cf
Port
587
Username
[email protected]
Password
daddyhandsome@1234

Targets

- Target
  SecuriteInfo.com.Trojan.PackedNET.785.508.32674
- Size 1.1MB
- SHA256 1b22cede73b15157e4e5555e8729d6203f563e73943033e26e1082f27576a7b2
- MD5 d3ad204cd7500b797fee163cd10bf75b
- SHA1 6b45ec03eb527190bbe203628ade97bb140afa52
- SHA512 22b0df099d58baf4468972b93266e34db653bf34edfb8edfb0287419822c7b9db20ad9facb3072d637e57f44a7c78b6d0adae2bea7febebb50b1cb882b5d6cbe
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan