agenttesla | e2cbded6f889f93a08c2889a5c93385b3b58a569169c17cf08fc667fa8869021 | Triage™

Login
Reports

Overview

overview

Static

static

invoice.exe

windows7_x64

invoice.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
invoice.exe
Size 717KB
Sample200812-ap8hpfs8vj
SHA256 e2cbded6f889f93a08c2889a5c93385b3b58a569169c17cf08fc667fa8869021
MD5 baab32134f7437976951e908d5b70f6a
SHA1 71558fed91f3352d261b07b9985358ebc58e5756
SHA512 d009b2d683b29ac8374cad52ec9596d8f52eb12b695a46a6b9065f51c62954113e4f8d034a67bc9d1f23c3ca0b168e1446f5895bbfc7e41f87f95beab7896c17
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

invoice.exe

Resource

win7

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

invoice.exe

Resource

win10v200722

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.tiig-eg.com
Port
587
Username
[email protected]
Password
servicelorch

Targets

- Target
  invoice.exe
- Size 717KB
- SHA256 e2cbded6f889f93a08c2889a5c93385b3b58a569169c17cf08fc667fa8869021
- MD5 baab32134f7437976951e908d5b70f6a
- SHA1 71558fed91f3352d261b07b9985358ebc58e5756
- SHA512 d009b2d683b29ac8374cad52ec9596d8f52eb12b695a46a6b9065f51c62954113e4f8d034a67bc9d1f23c3ca0b168e1446f5895bbfc7e41f87f95beab7896c17
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy