Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
The Spy Within: A Close Encounter with Agent Tesla Malware
Malware Families
Excerpt
The analyzed sample is part of the notorious malware family known as 'Agent Tesla,' classified as a Remote Access Trojan (RAT). This particular variant, encapsulated in a compiled .exe file, unfolds a complex web of functions and methods designed to gather sensitive data from the infected device. Throughout the static analysis, we will delve into the intricate layers of this malware, unraveling its inner workings by examining the functions and Windows API calls it…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | afc29232c4989587db2c54b7c9f145fd0d73537e045ece15338582ede5389fce | Medium | Score 53/100 | First seen |
| MD5 | 6c00dff27e7b9281f4aa295b522b1e4d | Medium | Score 53/100 | First seen |
| SHA1 | 4ed317a0661c31766048fb6859f55c9646bb3534 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…