agenttesla | 5a1ff51485fd7f49e413093ab5c705265a6d5ec108c1ce955fbe99da3d29aa33 | Triage™

Login
Reports

Overview

overview

Static

static

Plumbing P...FQ.exe

windows7_x64

Plumbing P...FQ.exe

windows10_x64

6

Sharing

Copy URL Twitter E-mail

General

Target
Plumbing Pumps RFQ.exe
Size 1.6MB
Sample201109-x6km4f2e5n
SHA256 5a1ff51485fd7f49e413093ab5c705265a6d5ec108c1ce955fbe99da3d29aa33
MD5 9e831c7cfe7af7d9abead8e8fe57187c
SHA1 5fedcc0d267c9806493fa393eaf65a5887ec2469
SHA512 027cfcfd43e44462e1f9b38c78a6cac9327cc161646910cfcff9d6504e0975d3a75cd46c6ef463544871492debdb389057a5f5c505fc618289ddc3b4d1c85fdb
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

Plumbing Pumps RFQ.exe

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

Plumbing Pumps RFQ.exe

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.privateemail.com
Port
587
Username
[email protected]
Password
@damienzy.xyz2240

Targets

- Target
  Plumbing Pumps RFQ.exe
- Size 1.6MB
- SHA256 5a1ff51485fd7f49e413093ab5c705265a6d5ec108c1ce955fbe99da3d29aa33
- MD5 9e831c7cfe7af7d9abead8e8fe57187c
- SHA1 5fedcc0d267c9806493fa393eaf65a5887ec2469
- SHA512 027cfcfd43e44462e1f9b38c78a6cac9327cc161646910cfcff9d6504e0975d3a75cd46c6ef463544871492debdb389057a5f5c505fc618289ddc3b4d1c85fdb
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

© 2018-2026

Terms | Privacy