agenttesla | 0702729c34578ee78cf3cb883ee298fc4aa67dbb433981790605e4e4afb642ff | Triage™

Login
Reports

Overview

overview

Static

static

vbc(22).exe

windows7_x64

vbc(22).exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
vbc(22).exe
Size 1.4MB
Sample201109-hmjrarmeca
SHA256 0702729c34578ee78cf3cb883ee298fc4aa67dbb433981790605e4e4afb642ff
MD5 0782f7a8482eb7b2dd5b9314916374b1
SHA1 d99c6bc81eb99b6cf1a029bb79f4d9607ba475ca
SHA512 b77a2097378782629251bc0f546e039c54a2d4f990d293825ccfc0bcbd1b69b9f3dac940cf29ec94fd382e995f738777881934b225b8b1b2ade0c99ceb84530f
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

vbc(22).exe

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

vbc(22).exe

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.texmaco.in
Port
587
Username
[email protected]
Password
admin@123

Extracted

Credentials

Protocol
smtp
Host
smtp.texmaco.in
Port
587
Username
[email protected]
Password
admin@123

Targets

- Target
  vbc(22).exe
- Size 1.4MB
- SHA256 0702729c34578ee78cf3cb883ee298fc4aa67dbb433981790605e4e4afb642ff
- MD5 0782f7a8482eb7b2dd5b9314916374b1
- SHA1 d99c6bc81eb99b6cf1a029bb79f4d9607ba475ca
- SHA512 b77a2097378782629251bc0f546e039c54a2d4f990d293825ccfc0bcbd1b69b9f3dac940cf29ec94fd382e995f738777881934b225b8b1b2ade0c99ceb84530f
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy