agenttesla | 1de76edc36df8fc966ce695474bfdb15e937610ad67deef22ae699695e185a76 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
proforma invoice.exe
Size 490KB
Sample210726-5r9tkfthy2
SHA256 1de76edc36df8fc966ce695474bfdb15e937610ad67deef22ae699695e185a76
MD5 abf840926f297ae1783d26179435a7c7
SHA1 a987cba29f906967b5f84803b1e1594d10e09da9
SHA512 26c732bb6357745705606ea0b63bf3dd5b58db5b911e66a54fbfbcc32ea94876cfc142eed9a39f629f2a005caa4a25304a0433de6defecf686aed67bfe27723f
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.framafilms.com
Port
587
Username
[email protected]
Password
lister11

Targets

- Target
  proforma invoice.exe
- Size 490KB
- SHA256 1de76edc36df8fc966ce695474bfdb15e937610ad67deef22ae699695e185a76
- MD5 abf840926f297ae1783d26179435a7c7
- SHA1 a987cba29f906967b5f84803b1e1594d10e09da9
- SHA512 26c732bb6357745705606ea0b63bf3dd5b58db5b911e66a54fbfbcc32ea94876cfc142eed9a39f629f2a005caa4a25304a0433de6defecf686aed67bfe27723f
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan