agenttesla | bebb69c2728586ef2c7275d822bae99ca516ba765af9bbd13e9a34cdf650f32c | Triage™

Login
Reports

Overview

overview

Static

static

Product Inquiry.exe

windows7_x64

Product Inquiry.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
Product Inquiry.exe
Size 559KB
Sample200701-bwv3g4ktr2
SHA256 bebb69c2728586ef2c7275d822bae99ca516ba765af9bbd13e9a34cdf650f32c
MD5 77c2342d8247fe38d630e7d618baf90a
SHA1 9df2f816407b2aa989c73f8126a744e875014a30
SHA512 31c3089be1c0470f5a5416c697ea575b5081f0a855b2a82c7df353400e8dbca9eaec4e96a360874350fbc89c9e627d33f0fd714fc2311a1eda483e60cab8366d
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

Product Inquiry.exe

Resource

win7

windows7_x64

0 signatures

0 seconds

agenttesla keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

Product Inquiry.exe

Resource

win10v200430

windows10_x64

0 signatures

0 seconds

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.karcek.com.tr
Port
587
Username
[email protected]
Password
Ahmet.6193

Extracted

Credentials

Protocol
smtp
Host
mail.karcek.com.tr
Port
587
Username
[email protected]
Password
Ahmet.6193

Targets

- Target
  Product Inquiry.exe
- Size 559KB
- SHA256 bebb69c2728586ef2c7275d822bae99ca516ba765af9bbd13e9a34cdf650f32c
- MD5 77c2342d8247fe38d630e7d618baf90a
- SHA1 9df2f816407b2aa989c73f8126a744e875014a30
- SHA512 31c3089be1c0470f5a5416c697ea575b5081f0a855b2a82c7df353400e8dbca9eaec4e96a360874350fbc89c9e627d33f0fd714fc2311a1eda483e60cab8366d
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy