agenttesla | b532b8d30d6f2e657052c44c27649bf8aed491f0924dd424b586138ee0c2bdb0 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
369012.exe
Size 39KB
Sample220221-rfmk8saea3
SHA256 b532b8d30d6f2e657052c44c27649bf8aed491f0924dd424b586138ee0c2bdb0
MD5 938467ebc05c2bdeb3962e731a267eb3
SHA1 41a83e1742e903ed2b2f5ccbadc08300d83de25f
SHA512 bff3726226cbef783e1807badb090b628d978cd49df0d9946df6b29309673c2b6da4bc718fee65925465001c7b792a93396e7e0ebd1ed7d36d69a68d757fdbbc
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.escueladeseguridadmaritima.com
Port
587
Username
[email protected]
Password
JUsatelite2020
Email to
[email protected]

Targets

- Target
  369012.exe
- Size 39KB
- SHA256 b532b8d30d6f2e657052c44c27649bf8aed491f0924dd424b586138ee0c2bdb0
- MD5 938467ebc05c2bdeb3962e731a267eb3
- SHA1 41a83e1742e903ed2b2f5ccbadc08300d83de25f
- SHA512 bff3726226cbef783e1807badb090b628d978cd49df0d9946df6b29309673c2b6da4bc718fee65925465001c7b792a93396e7e0ebd1ed7d36d69a68d757fdbbc
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan