agenttesla | a91a2b8234a4b5a0fcd701970e05a01d153cd65ff27ed7e35fe603e3a59eaa40 | Triage™

Login
Reports

Overview

overview

Static

static

1120-3378-AWB.exe

windows7_x64

1120-3378-AWB.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
1120-3378-AWB.exe
Size 1.4MB
Sample200624-vre6dbqh6a
SHA256 a91a2b8234a4b5a0fcd701970e05a01d153cd65ff27ed7e35fe603e3a59eaa40
MD5 fd23513eaf9fcb99845b6b518fafa080
SHA1 9dd54f29b70f8852988b523caebd908cfcbcbf07
SHA512 6e67e3b59500ca6f78f280ea4b841296c70cb9ade0fb625ca9c332aa5513b0a0e771a083eb34bdfd93e7665d7a4d03845fe8c187e090ee7d22d470e2633191e4
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

1120-3378-AWB.exe

Resource

win7v200430

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

1120-3378-AWB.exe

Resource

win10

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.edaraproperty.net
Port
587
Username
[email protected]
Password
WEST##963852741

Extracted

Credentials

Protocol
smtp
Host
mail.edaraproperty.net
Port
587
Username
[email protected]
Password
WEST##963852741

Targets

- Target
  1120-3378-AWB.exe
- Size 1.4MB
- SHA256 a91a2b8234a4b5a0fcd701970e05a01d153cd65ff27ed7e35fe603e3a59eaa40
- MD5 fd23513eaf9fcb99845b6b518fafa080
- SHA1 9dd54f29b70f8852988b523caebd908cfcbcbf07
- SHA512 6e67e3b59500ca6f78f280ea4b841296c70cb9ade0fb625ca9c332aa5513b0a0e771a083eb34bdfd93e7665d7a4d03845fe8c187e090ee7d22d470e2633191e4
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops startup file
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy