MITRE ATT&CKsoftware (malware)

S0331 Agent Tesla

Published 2019-01-29 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.3
Created
2019-01-29

Description

Agent Tesla is a spyware Trojan written for the .NET framework that has been observed since at least 2014.

Related

Uses · MITRE ATT&CK (37)

  • T1685 Disable or Modify Tools technique
  • T1016.002 Wi-Fi Discovery sub-technique
  • T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1071.003 Mail Protocols sub-technique
  • T1564.003 Hidden Window sub-technique
  • T1204.002 Malicious File sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1564.001 Hidden Files and Directories sub-technique
  • T1087.001 Local Account sub-technique
  • T1560 Archive Collected Data technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1056.001 Keylogging sub-technique
  • T1555 Credentials from Password Stores technique
  • T1552.001 Credentials In Files sub-technique
  • T1552.002 Credentials in Registry sub-technique
  • T1218.009 Regsvcs/Regasm sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1055.012 Process Hollowing sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1497 Virtualization/Sandbox Evasion technique
  • T1203 Exploitation for Client Execution technique
  • T1185 Browser Session Hijacking technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1016 System Network Configuration Discovery technique
  • T1027 Obfuscated Files or Information technique
  • T1033 System Owner/User Discovery technique
  • T1047 Windows Management Instrumentation technique
  • T1055 Process Injection technique
  • T1057 Process Discovery technique
Show all 37 ›

Referenced by MITRE ATT&CK · uses (2)

References