agenttesla | b2bcd8d3a82d86459384063b335f5be3c9615de574c4e2bc1ca6963eb1c9b721 | Triage™

Login
Reports

Overview

overview

Static

static

Bank payme...ft.exe

windows7_x64

Bank payme...ft.exe

windows10_x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Bank payment swift.exe
Size 679KB
Sample200723-rx6r2ktz8e
SHA256 b2bcd8d3a82d86459384063b335f5be3c9615de574c4e2bc1ca6963eb1c9b721
MD5 033c42971c0038f8608f859a4540e583
SHA1 2e0b35d8788c2fd0139d0238764c757b67229644
SHA512 12c8a0a6119c219f29a9deffbe9534c03835fc761fc0f35f575d1a47016930ed13d951212075c28131305b5f8e6c3553d17d18cfeb5a926eaab010bf33221b15
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

Bank payment swift.exe

Resource

win7

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

Bank payment swift.exe

Resource

win10v200722

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.aquariuslogistics.com
Port
587
Username
[email protected]
Password
AQL@2019#$

Targets

- Target
  Bank payment swift.exe
- Size 679KB
- SHA256 b2bcd8d3a82d86459384063b335f5be3c9615de574c4e2bc1ca6963eb1c9b721
- MD5 033c42971c0038f8608f859a4540e583
- SHA1 2e0b35d8788c2fd0139d0238764c757b67229644
- SHA512 12c8a0a6119c219f29a9deffbe9534c03835fc761fc0f35f575d1a47016930ed13d951212075c28131305b5f8e6c3553d17d18cfeb5a926eaab010bf33221b15
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

© 2018-2026

Terms | Privacy