agenttesla | 13675c7709efcd13c8334d547539a2c1c7f2e78e3cf9dee498c236d869493378 | Triage™

Login
Reports

Overview

overview

Static

static

Payment_Advice.exe

windows7_x64

Payment_Advice.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
Payment_Advice.exe
Size 624KB
Sample210510-r46tty6er2
SHA256 13675c7709efcd13c8334d547539a2c1c7f2e78e3cf9dee498c236d869493378
MD5 32a340f6ef91a228b6422372821a2ada
SHA1 e662da1e42385bab7fe9db1dad45685ec8472177
SHA512 1aabc022b76193e8333102cc8b13b7d8a93ae04ea92bf29f64911dd85fd1cdf35e9a91a71ef600c5e10d1111c99d4b526aa228fe5cbf74d6a3d3319363c9dbbd
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

Payment_Advice.exe

Resource

win7v20210410

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

Payment_Advice.exe

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.amarantbg.com
Port
587
Username
[email protected]
Password
Office123

Targets

- Target
  Payment_Advice.exe
- Size 624KB
- SHA256 13675c7709efcd13c8334d547539a2c1c7f2e78e3cf9dee498c236d869493378
- MD5 32a340f6ef91a228b6422372821a2ada
- SHA1 e662da1e42385bab7fe9db1dad45685ec8472177
- SHA512 1aabc022b76193e8333102cc8b13b7d8a93ae04ea92bf29f64911dd85fd1cdf35e9a91a71ef600c5e10d1111c99d4b526aa228fe5cbf74d6a3d3319363c9dbbd
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy