agenttesla | 74651edafd3ae6b5619abff5ea29ae2e85cb1d1ed8ada05afeffa15e96dfa449 | Triage™

Login
Reports

Overview

overview

Static

static

FACTURA PROFORMA.exe

windows7_x64

FACTURA PROFORMA.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
FACTURA PROFORMA.exe
Size 47KB
Sample210311-m72nt52dbs
SHA256 74651edafd3ae6b5619abff5ea29ae2e85cb1d1ed8ada05afeffa15e96dfa449
MD5 a2fd342c195c11bc97d933d9751a54b2
SHA1 a9cbbc6ae26b8687b9c6d807802784e5b83b7500
SHA512 5dfa535ad889eed591e0c66384647c15684ce0af3be591ae32ff6219f7acab88792240b8aa5625291ae79711c29b16dc009eade00640b954dfe4ecae2131e737
MD5 SHA1 SHA512

Score

10^/10

agenttesla evasion keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

FACTURA PROFORMA.exe

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

agenttesla evasion keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

FACTURA PROFORMA.exe

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1486952527:AAHvvJmG-WgJZgXIQPo_BDv7llcA7hx4Mkk/sendDocument

Targets

- Target
  FACTURA PROFORMA.exe
- Size 47KB
- SHA256 74651edafd3ae6b5619abff5ea29ae2e85cb1d1ed8ada05afeffa15e96dfa449
- MD5 a2fd342c195c11bc97d933d9751a54b2
- SHA1 a9cbbc6ae26b8687b9c6d807802784e5b83b7500
- SHA512 5dfa535ad889eed591e0c66384647c15684ce0af3be591ae32ff6219f7acab88792240b8aa5625291ae79711c29b16dc009eade00640b954dfe4ecae2131e737
- MD5 SHA1 SHA512
Score

10^/10

agenttesla evasion keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Windows security bypass
  evasion trojan
- AgentTesla Payload
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslaevasionkeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy