agenttesla | 8ffd510513cafe4d5b4812ef693f06dcff7dc4097cccacd1be4ca0d308f3494d | Triage™

Login
Reports

Overview

overview

Static

static

BL.exe

windows7_x64

BL.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
BL.exe
Size 1.1MB
Sample210323-33fvqbmd5a
SHA256 8ffd510513cafe4d5b4812ef693f06dcff7dc4097cccacd1be4ca0d308f3494d
MD5 728edaa7792ce1729269bcfc6470160b
SHA1 25fa4da65dc102419adfc25dfa58981ebf935ebb
SHA512 620c2f0598d786d42cca798631645d87c5b58d4f4193ce2475c542f902bb9cc8a35db4b34688219721111ac8d880122bdfb6622cf2580ff98d2faccd3f9390b7
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

BL.exe

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

BL.exe

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
project2021blessinggoodgood2222

Targets

- Target
  BL.exe
- Size 1.1MB
- SHA256 8ffd510513cafe4d5b4812ef693f06dcff7dc4097cccacd1be4ca0d308f3494d
- MD5 728edaa7792ce1729269bcfc6470160b
- SHA1 25fa4da65dc102419adfc25dfa58981ebf935ebb
- SHA512 620c2f0598d786d42cca798631645d87c5b58d4f4193ce2475c542f902bb9cc8a35db4b34688219721111ac8d880122bdfb6622cf2580ff98d2faccd3f9390b7
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy