agenttesla | 3660e5c8b93737203d8fd83e8bf059e2dedc8ca43e7cbf91e15f75df7ee4a1d2 | Triage™

Login
Reports

Overview

overview

Static

static

file.exe

windows7_x64

file.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 867KB
Sample210524-w5jnpv7rt2
SHA256 3660e5c8b93737203d8fd83e8bf059e2dedc8ca43e7cbf91e15f75df7ee4a1d2
MD5 106c2e554bf1cbcd6b42d7e1347976cf
SHA1 fbc6c10f087ee2d003d1444a2c06cb9fa1fcb110
SHA512 5a7714eb4b4d13793d6305176f2ae7642bf001bfbdf9236f63c24c11f9d497d24f3d15e291398ac3a596139e7838e6e585bc7666d55ed4536e8f3fa3fe75a7b6
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

file.exe

Resource

win7v20210408

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

file.exe

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
ftp
Host
ftp://ftp.iquna-eg.com/
Port
21
Username
[email protected]
Password
}cr1e%xbp$6?

Targets

- Target
  file.exe
- Size 867KB
- SHA256 3660e5c8b93737203d8fd83e8bf059e2dedc8ca43e7cbf91e15f75df7ee4a1d2
- MD5 106c2e554bf1cbcd6b42d7e1347976cf
- SHA1 fbc6c10f087ee2d003d1444a2c06cb9fa1fcb110
- SHA512 5a7714eb4b4d13793d6305176f2ae7642bf001bfbdf9236f63c24c11f9d497d24f3d15e291398ac3a596139e7838e6e585bc7666d55ed4536e8f3fa3fe75a7b6
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy