agenttesla | f779ac7255de70de168e1e493c82eba2dd5b459826d2840591b09b32593f1dca | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
paymentcopy343112.exe
Size 780KB
Sample220215-rt6ahafhd3
SHA256 f779ac7255de70de168e1e493c82eba2dd5b459826d2840591b09b32593f1dca
MD5 a80f85339afe0dd931e135fbe4958690
SHA1 6ae1c2190a5f98aee0d5b53ae1d8b86efd994fde
SHA512 e024af2a0a0fb0f167881eb95ef592682613070d3eb4d24dc1fc61d1fcd80fff30743ab1c14b0cbdd3670a88c9c8c5040016236004c47b0ca22003967c222844
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.notariavela.com.pe
Port
587
Username
[email protected]
Password
U@l2012+2019

Targets

- Target
  paymentcopy343112.exe
- Size 780KB
- SHA256 f779ac7255de70de168e1e493c82eba2dd5b459826d2840591b09b32593f1dca
- MD5 a80f85339afe0dd931e135fbe4958690
- SHA1 6ae1c2190a5f98aee0d5b53ae1d8b86efd994fde
- SHA512 e024af2a0a0fb0f167881eb95ef592682613070d3eb4d24dc1fc61d1fcd80fff30743ab1c14b0cbdd3670a88c9c8c5040016236004c47b0ca22003967c222844
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan