agenttesla | e5e935eef2640f71f81fed0719db60abddc3fa6b6ca301b96b1b75282e430823 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
21-5719-ST-OKI.exe
Size 493KB
Sample210602-vy4aglecdx
SHA256 e5e935eef2640f71f81fed0719db60abddc3fa6b6ca301b96b1b75282e430823
MD5 0a213dba72329f6897b053c3fcd0126f
SHA1 5b802c2a6a4d1afe701e74fb981e3ad48a49978d
SHA512 7afac89778bb739fbd1a213b251b3585c12e90cf1a1c5e8ad17720a426523daa2e5cd39c7e9eaa97f8d52a8f42b04c97c245784d8056222865f5354deaa653e3
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
box5363.bluehost.com
Port
587
Username
[email protected]
Password
Hajarbh@1993

Targets

- Target
  21-5719-ST-OKI.exe
- Size 493KB
- SHA256 e5e935eef2640f71f81fed0719db60abddc3fa6b6ca301b96b1b75282e430823
- MD5 0a213dba72329f6897b053c3fcd0126f
- SHA1 5b802c2a6a4d1afe701e74fb981e3ad48a49978d
- SHA512 7afac89778bb739fbd1a213b251b3585c12e90cf1a1c5e8ad17720a426523daa2e5cd39c7e9eaa97f8d52a8f42b04c97c245784d8056222865f5354deaa653e3
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan