agenttesla | 83ea7db0106f84be0194ce1ced95e79ee399a8b5029dd420340847ad4d7e4a1b | Triage™

Login
Reports

Overview

overview

Static

static

QT4562020.exe

windows7_x64

QT4562020.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
QT4562020.exe
Size 1.5MB
Sample200702-h6p5wep2ms
SHA256 83ea7db0106f84be0194ce1ced95e79ee399a8b5029dd420340847ad4d7e4a1b
MD5 968ef0bfb3cd99fe0a6b8a63b39ad029
SHA1 a92dc69e2a21878d14f7919da9fba5d4895c7a64
SHA512 b18e552354bc6d084a17bfec684c64cc9e000bfeb54d79c17487841464d4a7d4602a6589fd60ddb881c5555ff9dcaeec59e1822ea13f50a489a11cb0602faf12
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

QT4562020.exe

Resource

win7

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

QT4562020.exe

Resource

win10v200430

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.edaraproperty.net
Port
587
Username
[email protected]
Password
WEST##963852741

Extracted

Credentials

Protocol
smtp
Host
mail.edaraproperty.net
Port
587
Username
[email protected]
Password
WEST##963852741

Targets

- Target
  QT4562020.exe
- Size 1.5MB
- SHA256 83ea7db0106f84be0194ce1ced95e79ee399a8b5029dd420340847ad4d7e4a1b
- MD5 968ef0bfb3cd99fe0a6b8a63b39ad029
- SHA1 a92dc69e2a21878d14f7919da9fba5d4895c7a64
- SHA512 b18e552354bc6d084a17bfec684c64cc9e000bfeb54d79c17487841464d4a7d4602a6589fd60ddb881c5555ff9dcaeec59e1822ea13f50a489a11cb0602faf12
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy